← back
CVE-2012-5520

CVE-2012-5520

EPSS 3.1%
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0055.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0059.htmlhttp://openwall.com/lists/oss-security/2012/11/13/12http://openwall.com/lists/oss-security/2012/11/13/9http://openwall.com/lists/oss-security/2012/11/14/11http://openwall.com/lists/oss-security/2012/11/14/5http://secunia.com/advisories/49128http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437http://www.openvas.org/OVSA20121112.htmlhttp://www.securityfocus.com/bid/56497