bugtraq - [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <201211131509.39639.timb@openvas.org>
Date: Tue, 13 Nov 2012 15:09:33 +0000
From: Tim Brown <timb@...nvas.org>
To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk,
  oss-security@...ts.openwall.com
Subject: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection

Summary

It has been identified that OpenVAS Manager is vulnerable to command
injection due to insufficient validation of user supplied data when
processing OMP requests.  It has been identified that this vulnerability
may allow arbitrary code to be executed with the privileges of the
OpenVAS Manager on vulnerable systems.  CVE-2012-5520 has been assigned
to this vulnerability.

Current Status

As of the 20th January 2011, the state of the vulnerabilities is believed
to be as follows.  A patch has been supplied by Greenbone Networks which
it successfully resolves this vulnerability.  New releases of both 3.0.x
and 4.0.x have also been created which incorporate this patch.

Thanks

OpenVAS would like to thank Andre Heinecke of Greenbone Networks for
his help in reporting the vulnerability.
-- 
Tim Brown
<mailto:timb@...nvas,org>
<http://www.openvas.org/>

View attachment "OVSA20121112.txt" of type "text/plain" (2890 bytes)

Download attachment "signature.asc " of type "application/pgp-signature" (837 bytes)