Cross site request forgery (csrf)

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0018

CVE-2011-0018 concerns the OpenVAS Manager command injection via the email function in manage_sql.c. Affected are OpenVAS Manager 1.0.x (up to 1.0.3) and 2.0.x (up to 2.0rc2). The root cause is insufficient validation of user-supplied data in OMP requests processed by Greenbone Security Assistant...

CVE-2011-0018

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

CVE-2011-0650

CVE-2011-0650 concerns Greenbone Security Assistant (GSA) prior to 2.0+rc3. The issue is a CSRF vulnerability that allows an attacker to hijack the user’s authenticated session to issue OMP requests to OpenVAS Manager (e.g., sending email). This is tied to exploitation of CVE-2011-0018 via the GS...

[OVSA20110118] OpenVAS Manager Vulnerable To Command Injection

Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalation within the OpenVAS Manager but more complex injectio...

Fedora Update for maniadrive-data FEDORA-2011-0329

Check for the Version of maniadrive-data OpenVAS Vulnerability Test Fedora Update for maniadrive-data FEDORA-2011-0329 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

SYN Scan

This plugins performs a supposedly fast SYN port scan. It does so by computing the RTT round trip time of the packets coming back and forth between the openvassd host and the target, then it uses that to quickly send SYN packets to the remote host. OpenVAS Vulnerability Test $Id: synscan.nasl 702...

OpenVAS TCP scanner

This plugin is a classical TCP port scanner It shall be reasonably quick even against a firewalled target. Once a TCP connection is open, it grabs any available banner for the service identification plugins Note that TCP scanners are more intrusive than SYN half open scanners. OpenVAS Vulnerabili...

OpenVAS TCP scanner

This plugin is a classical TCP port scanner. It shall be reasonably quick even against a firewalled target. Once a TCP connection is open, it grabs any available banner for the service identification plugins Note that TCP scanners are more intrusive than SYN half open scanners...

Microsoft WMI Administrative Tools ActiveX Control Remote Code Execution Vulnerabilities

This host is installed with Microsoft WMI Administrative Tools and is prone to multiple remote code execution vulnerabilities. This NVT has been replaced by NVT secpodms11-027.nasl OID:1.3.6.1.4.1.25623.1.0.900281. OpenVAS Vulnerability Test $Id: gbmswmiadmintoolsactivexcodeexecvuln.nasl 5364...

Mandriva Update for php MDVA-2010:238 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVA-2010:238 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

MS Windows ICSW Remote Code Execution Vulnerability (2443105)

This host is missing a critical security update according to Microsoft Bulletin MS10-097. OpenVAS Vulnerability Test $Id: secpodms10-097.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Windows ICSW Remote Code Execution Vulnerability 2443105 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Nmap NSE: ASN Query

This script attempts to map IP addresses to autonomous system AS numbers. This is a wrapper on the Nmap Security Scanner's http://nmap.org asn-query.nse. OpenVAS Vulnerability Test $Id: gbnmapasnquery.nasl 7148 2017-09-15 13:01:14Z cfischer $ Wrapper for Nmap ASN Query NSE script. Authors:...

Fedora Update for ocsinventory-agent FEDORA-2010-16314

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Fedora Update for ocsinventory-agent FEDORA-2010-16314 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for gnome-web-photo FEDORA-2010-16897

Check for the Version of gnome-web-photo OpenVAS Vulnerability Test Fedora Update for gnome-web-photo FEDORA-2010-16897 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Last Username (Windows)

The script detects if Last Login Username an Loginwarning is displayed. OpenVAS Vulnerability Test $Id: GSHBWMILoginscreen.nasl 7067 2017-09-06 11:50:33Z teissa $ Last username Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an...

Mandriva Update for ocsinventory-agent MDVA-2010:234 (ocsinventory-agent)

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Mandriva Update for ocsinventory-agent MDVA-2010:234 ocsinventory-agent Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

FreeNAS Detection

This host is running FreeNAS, an embedded open source NAS Network-Attached Storage distribution based on FreeBSD. OpenVAS Vulnerability Test $Id: gbfreenasdetect.nasl 6701 2017-07-12 13:04:06Z cfischer $ FreeNAS Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH...

RedHat Update for mysql RHSA-2010:0825-01

Check for the Version of mysql OpenVAS Vulnerability Test RedHat Update for mysql RHSA-2010:0825-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...