CVE-2013-6766: High severity OpenVAS OpenVAS Administrator vulnerability
OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENTAUTHENTIC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6766?
CVE-2013-6766 is considered a high severity vulnerability due to its ability to allow remote attackers to bypass authentication and execute commands.
How do I fix CVE-2013-6766?
To fix CVE-2013-6766, upgrade OpenVAS Administrator to version 1.2.2 or 1.3.2 or later.
What systems are affected by CVE-2013-6766?
CVE-2013-6766 affects OpenVAS Administrator versions 1.2-rc1, 1.2.0, 1.2.1, 1.3-beta1, 1.3-rc1, 1.3.0, and 1.3.1.
What type of attack does CVE-2013-6766 allow?
CVE-2013-6766 allows remote attackers to bypass authentication restrictions and execute arbitrary commands.
Is CVE-2013-6766 a known vulnerability?
Yes, CVE-2013-6766 is a known vulnerability that has been publicly documented and acknowledged in security advisories.