Vendor Dictionary: OpenVAS

OpenVAS

Short Name:	OpenVAS
Previous Names:	[None Entered]
URL:	http://www.openvas.org/ [visit link]
Email:	securityopenvas.org
Security URL:	http://www.openvas.org/security.html [visit link]
Security Email:	securityopenvas.org
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

OpenVAS

OpenVAS

Manager: 1.0.3; OSVDB ID: 70639 OpenVAS Manager manage_sql.c Email Function OMP Request Command Injection; 2.0rc2; OSVDB ID: 70639 OpenVAS Manager manage_sql.c Email Function OMP Request Command Injection

OpenVAS Manager: 2.0.2; OSVDB ID: 71994 OpenVAS Manager Report Format Plugin Verification Weakness Arbitrary Code Execution; 3.0.3; OSVDB ID: 87330 OpenVAS Manager manage_sql.c send_to_sourcefire() Function OMP Request Parsing Remote Shell Command Execution

Greenbone Security Assistant: 1.0.3; OSVDB ID: 70687 Greenbone Security Assistant OpenVAS Manager Arbitrary Command Execution CSRF

openvas-server: 2.0.3; OSVDB ID: 58972 OpenVAS openvassd utils.c Temporary File Handling Race Condition Arbitrary File Overwrite

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.