CVE-2011-5178 — MEDIUM (4.3)

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Infoblox	Netmri	6.0.2.42

Related Weaknesses (CWE)

CWE-79

References

http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-Exploit
http://seclists.org/fulldisclosure/2011/Nov/158Exploit
http://secunia.com/advisories/46854Vendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpgVendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpgVendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpgVendor Advisory
http://www.securitytracker.com/id?1026319Exploit
http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-Exploit
http://seclists.org/fulldisclosure/2011/Nov/158Exploit
http://secunia.com/advisories/46854Vendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpgVendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpgVendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpgVendor Advisory
http://www.securitytracker.com/id?1026319Exploit

FAQ

What is CVE-2011-5178?

CVE-2011-5178 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or ...

How severe is CVE-2011-5178?

CVE-2011-5178 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-5178?

Check the references section above for vendor advisories and patch information. Affected products include: Infoblox Netmri.