PT-2011-2016 · Greenbone Security · Openvas Manager

Alexander Van Eee + 1 · Published 2011-01-28 · Updated 2018-10-10 · CVE-2011-0018

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenVAS Manager versions 1.0.x through 1.0.3 OpenVAS Manager versions 2.0.x through 2.0rc2

Description The issue allows remote authenticated users to execute arbitrary commands via the To or From e-mail address in an OMP request to the Greenbone Security Assistant (GSA). This is due to a problem in the email function in manage sql.c.

Recommendations For OpenVAS Manager versions 1.0.x through 1.0.3, consider disabling the email function in manage sql.c until a patch is available. For OpenVAS Manager versions 2.0.x through 2.0rc2, restrict access to the email function in manage sql.c to minimize the risk of exploitation. As a temporary workaround, avoid using the To and From e-mail address fields in OMP requests to the GSA until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0018

Affected Products

Openvas Manager

References · 10

• 🔥 https://exploit-db.com/exploits/16086 · Exploit
• 🔥 http://openvas.org/OVSA20110118.html · Exploit
• 🔥 http://exploit-db.com/exploits/16086 · Exploit
• http://vupen.com/english/advisories/2011/0208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0018 · Security Note
• http://secunia.com/advisories/43037 · Note
• http://osvdb.org/70639 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65011 · Note
• http://securityfocus.com/archive/1/515971/100/0/threaded · Note
• http://securityfocus.com/bid/45987 · Note