Description
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.
Exploits (1)
References (3)
Core 3
Core References
Vendor Advisory mailing-list
x_refsource_mlist
http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/11/10/2
Various Sources x_refsource_confirm
http://www.openvas.org/OVSA20131108.html
Scores
EPSS
0.0454
EPSS Percentile
89.2%
Details
CWE
CWE-287
Status
published
Products (13)
openvas/openvas_manager
4.0 beta1 (6 CPE variants)
openvas/openvas_manager
4.0.0
openvas/openvas_manager
4.0.1
openvas/openvas_manager
4.0.2
openvas/openvas_manager
4.0.3
openvas/openvas_manager
3.0 beta1 (9 CPE variants)
openvas/openvas_manager
3.0.0
openvas/openvas_manager
3.0.1
openvas/openvas_manager
3.0.2
openvas/openvas_manager
3.0.3
... and 3 more
Published
May 19, 2014
Tracked Since
Feb 18, 2026