CVE-2012-5520
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.
Affected products
n/a · n/aReferences
http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0055.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0059.htmlhttp://openwall.com/lists/oss-security/2012/11/13/12http://openwall.com/lists/oss-security/2012/11/13/9http://openwall.com/lists/oss-security/2012/11/14/11http://openwall.com/lists/oss-security/2012/11/14/5http://secunia.com/advisories/49128http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437http://www.openvas.org/OVSA20121112.htmlhttp://www.securityfocus.com/bid/56497