EUVD-2011-0668

Malware in sbrugna...

OpenVAS Manager Command Injection Vulnerability

No description provided by source. Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this...

OpenVAS Manager - Command Injection

OpenVAS Manager - Command Injection Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this...

CVE-2011-0018

creationtimestamp| type| source ---|---|--- 2011-01-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16086...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0018

CVE-2011-0018 concerns the OpenVAS Manager command injection via the email function in manage_sql.c. Affected are OpenVAS Manager 1.0.x (up to 1.0.3) and 2.0.x (up to 2.0rc2). The root cause is insufficient validation of user-supplied data in OMP requests processed by Greenbone Security Assistant...

[OVSA20110118] OpenVAS Manager Vulnerable To Command Injection

Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalation within the OpenVAS Manager but more complex injectio...