CVE-2012-5520
26.11.2012, 12:45
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openvas | openvas_manager | 3.0:beta1 |
| openvas | openvas_manager | 3.0:beta2 |
| openvas | openvas_manager | 3.0:beta3 |
| openvas | openvas_manager | 3.0:beta4 |
| openvas | openvas_manager | 3.0:beta5 |
| openvas | openvas_manager | 3.0:beta6 |
| openvas | openvas_manager | 3.0:beta7 |
| openvas | openvas_manager | 3.0:beta8 |
| openvas | openvas_manager | 3.0:rc1 |
| openvas | openvas_manager | 3.0.0 |
| openvas | openvas_manager | 3.0.1 |
| openvas | openvas_manager | 3.0.2 |
| openvas | openvas_manager | 3.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References