CVEs-PoC/2014/CVE-2014-3418.md

CVE-2014-3418

Description

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.

POC

Reference

• http://seclists.org/fulldisclosure/2014/Jul/35
• http://seclists.org/fulldisclosure/2014/Jul/35
• http://www.exploit-db.com/exploits/34030
• http://www.exploit-db.com/exploits/34030

Github

• https://github.com/depthsecurity/NetMRI-2014-3418