CVE-2011-0018 The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail add...
HighCVSS 9.0
EPSS 9.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To or (2) From e-mail address in an OMP request to the Greenbone Security Assistant (GSA).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openvas manager | = 1.0.0 | No fix listed |
| openvas manager | = 1.0.0-beta1 | No fix listed |
| openvas manager | = 1.0.0-beta2 | No fix listed |
| openvas manager | = 1.0.0-beta3 | No fix listed |
| openvas manager | = 1.0.0-beta4 | No fix listed |
| openvas manager | = 1.0.0-beta5 | No fix listed |
| openvas manager | = 1.0.0-beta6 | No fix listed |
| openvas manager | = 1.0.0-beta7 | No fix listed |
| openvas manager | = 1.0.0-rc1 | No fix listed |
| openvas manager | = 1.0.1 | No fix listed |
| openvas manager | = 1.0.2 | No fix listed |
| openvas manager | = 1.0.3 | No fix listed |
| openvas manager | = 2.0-beta1 | No fix listed |
| openvas manager | = 2.0-beta2 | No fix listed |
| openvas manager | = 2.0-beta3 | No fix listed |
| openvas manager | = 2.0-rc1 | No fix listed |
| openvas manager | = 2.0-rc2 | No fix listed |
References
- 70639 vdb-entry
- 43037 third-party-advisory
- 16086 exploit
- www.openvas.org exploit patch vendor-advisory
- 20110125 [OVSA20110118] OpenVAS Manager Vulnerable To Command Injection mailing-list
- 45987 vdb-entry
- ADV-2011-0208 vdb-entry vendor-advisory
- openvas-email-command-execution(65011) vdb-entry