Infoblox 6.8.4.x Weak MySQL Password
🗓️ 09 Jul 2014 00:00:00Reported by Nate KettlewellType 
packetstorm🔗 packetstormsecurity.com👁 88 Views
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | Infoblox 6.8.2.11 - OS Command Injection / Weak MySQL Password Vulnerability | 10 Jul 201400:00 | – | zdt |
 | CVE-2014-3419 | 15 Jul 201414:00 | – | cve |
 | CVE-2014-3419 | 15 Jul 201414:00 | – | cvelist |
 | EUVD-2014-3432 | 7 Oct 202500:30 | – | euvd |
 | CVE-2014-3419 | 15 Jul 201414:55 | – | nvd |
 | MySQL / MariaDB Default Credentials (MySQL Protocol) | 23 Aug 201200:00 | – | openvas |
| Infoblox NetMRI < 6.8.5 OS Command Injection Vulnerability - Active Check | 15 Jul 201400:00 | – | openvas |
 | Default credentials | 15 Jul 201414:55 | – | prion |
 | PT-2014-5307 | 15 Jul 201400:00 | – | ptsecurity |
 | CVE-2014-3419: Undefined Security Weakness | 15 Jul 201400:00 | – | rapid7 |
10
`Product: Network Automation
NetMRI
Switch Port Manager
Automation Change Manager
Security Device Controller
Vendor: InfoBlox
Vulnerable Version(s): 6.4.X.X-6.8.4.X
Tested Version: 6.8.2.11
Vendor Notification: May 12th, 2014
Public Disclosure: July 9th, 2014
Vulnerability Type: OS Command Injection [CWE-521]
CVE Reference: CVE-2014-3419
Risk Level: High
CVSSv2 Base Score: 5.2 (AV:L/AC:L/Au:S/C:C/I:P/A:N)
Solution Status: Solution Available
Discovered and Provided: Nate Kettlewell, Depth Security ( https://www.depthsecurity.com/ )
------------------------------------------------------------------------
-----------------------
Advisory Details:
Depth Security discovered a vulnerability in the InfoBlox Network Automation Products. This attack requires OS level access which must be obtained via another method.
1) Weak password on local MySQL database: CVE-2014-3419
The vulnerability exists due to a weak password used for local MySQL access
An authenticated user with shell access to the operating system can access the contents of any database in the local MySQL instance using the local MySQL client (mysql u root p) with the following credentials:
Username: root
Password: root
Sensitive information such as SNMP community names and network device credentials are encrypted inside of the database.
------------------------------------------------------------------------
-----------------------
Solution:
The vendor has released a hotfix to remediate this vulnerability on existing installations. The flaw was corrected in the 6.8.5 release.
------------------------------------------------------------------------
-----------------------
References:
[1] Depth Security Advisory - http://blog.depthsecurity.com/2014/07/os-command-injection-in-infoblox-netmri.html - OS Command Injection in NetMRI.
[2] NetMRI - http://www.infoblox.com/products/network-automation/netmri - NetMRI is an Enterprise Network Management Appliance.
[3] Common Weakness Enumeration (CWE) - http://cwe.mitre.org/ - targeted to developers and security practitioners, CWE is a formal list of software weakness types.
------------------------------------------------------------------------
-----------------------
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Jul 2014 00:00Current
9.6Critical risk
Vulners AI Score9.6
EPSS0.00459