CVE-2012-5520

Published: Nov 26, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.

Affected (13)

Products: Openvas: Openvas Manager

1 product

Openvas Manager

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Openvas Openvas Manager	Version 3.0.0
Openvas Openvas Manager	Version 3.0.1
Openvas Openvas Manager	Version 3.0.2
Openvas Openvas Manager	Version 3.0.3
Openvas Openvas Manager	Version 3.0 beta1
Openvas Openvas Manager	Version 3.0 beta2
Openvas Openvas Manager	Version 3.0 beta3
Openvas Openvas Manager	Version 3.0 beta4
Openvas Openvas Manager	Version 3.0 beta5
Openvas Openvas Manager	Version 3.0 beta6
Openvas Openvas Manager	Version 3.0 beta7
Openvas Openvas Manager	Version 3.0 beta8
Openvas Openvas Manager	Version 3.0 rc1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (22)

http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.html

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2012-11/0055.html

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2012-11/0059.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/11/13/12

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/11/13/9

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/11/14/11

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/11/14/5

Source: secalert@redhat.com

http://secunia.com/advisories/49128

Source: secalert@redhat.com

http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437

Source: secalert@redhat.com

http://www.openvas.org/OVSA20121112.html

Source: secalert@redhat.com

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/56497

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2012-11/0055.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/bugtraq/2012-11/0059.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/11/13/12

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/11/13/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/11/14/11

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/11/14/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49128

Source: af854a3a-2127-422b-91ae-364da2661108

http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openvas.org/OVSA20121112.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/56497

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.