Medium severity6.1NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026

CVE-2016-6484

Description

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.

Affected products

Infoblox/Netmri2 versions
cpe:2.3:a:infoblox:netmri:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:infoblox:netmri:*:*:*:*:*:*:*:*range: <=7.0.1
- (no CPE)range: <7.1.1
Infoblox/Network Automation NetMRIllm-fuzzy
Range: <7.1.1

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/138615/Infoblox-7.0.1-CRLF-Injection-HTTP-Response-Splitting.htmlnvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/92794nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1036736nvdThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/539366/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000