CVE-2012-5520
published 2012-11-26CVE-2012-5520: The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP…
PriorityP352high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.05%
85.9th percentile
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openvas | openvas_manager | — | — |
| openvas | openvas_manager | — | — |
| openvas | openvas_manager | — | — |
| openvas | openvas_manager | — | — |
| openvas | openvas_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0055.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0059.htmlhttp://openwall.com/lists/oss-security/2012/11/13/12http://openwall.com/lists/oss-security/2012/11/13/9http://openwall.com/lists/oss-security/2012/11/14/11http://openwall.com/lists/oss-security/2012/11/14/5http://secunia.com/advisories/49128http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437http://www.openvas.org/OVSA20121112.htmlhttp://www.securityfocus.com/bid/56497http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0055.htmlhttp://archives.neohapsis.com/archives/bugtraq/2012-11/0059.htmlhttp://openwall.com/lists/oss-security/2012/11/13/12http://openwall.com/lists/oss-security/2012/11/13/9http://openwall.com/lists/oss-security/2012/11/14/11http://openwall.com/lists/oss-security/2012/11/14/5http://secunia.com/advisories/49128http://wald.intevation.org/scm/viewvc.php?view=rev&root=openvas&revision=14437http://www.openvas.org/OVSA20121112.htmlhttp://www.securityfocus.com/bid/56497
2012-11-26
Published