CVE-2014-9220

Опубликовано: 03 дек. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147753.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00039.html
Third Party Advisory
http://openwall.com/lists/oss-security/2014/11/30/2
Mailing List
Third Party Advisory
http://www.openvas.org/OVSA20141128.html
Patch
Vendor Advisory
https://www.alienvault.com/forums/discussion/4415/
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147753.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00039.html
Third Party Advisory
http://openwall.com/lists/oss-security/2014/11/30/2
Mailing List
Third Party Advisory
http://www.openvas.org/OVSA20141128.html
Patch
Vendor Advisory
https://www.alienvault.com/forums/discussion/4415/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:openvas:openvas_manager:*:*:*:*:*:*:*:*

Версия до 4.0.5 (включая)

cpe:2.3:a:openvas:openvas_manager:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta10:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta11:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta12:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta13:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta2:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta3:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta4:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta5:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta6:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta7:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta8:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.0:beta9:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.5:*:*:*:*:*:*:*

cpe:2.3:a:openvas:openvas_manager:5.0.6:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.0044

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-7mpx-36hm-f96q

github

больше 3 лет назад