CVE-2013-6765 - CVE House
Back to Database
Status published High CVE-2013-6765

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows...

Vulnerability Description

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6765

Credits & Attribution

No credits recorded in the NVD database.

References

More from openvas

View All →
CVE-2013-6766
OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows...
High 7.5
CVE-2012-5520
The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before...
High 7.5
CVE-2011-0018
The email function in manage_sql.c in OpenVAS Manager 1.0.x through...
Critical 9

Affected Vendor

Affected Software

openvas manager
Vulnerable Versions:
4.0, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 3.0, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6

Timeline

Official Publish: May 19th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.