CVE-2013-6765

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-05-19 · updated 2026-06-17
Weakness: CWE-287

Description

OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.

Affected products

OpenVAS Manager: 4.0-beta1, 4.0-beta2, 4.0-beta3, 4.0-beta4, 4.0-beta5, 4.0-rc1 (+20)

References

http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html
http://www.openvas.org/OVSA20131108.html
http://www.openwall.com/lists/oss-security/2013/11/10/2
http://lists.wald.intevation.org/pipermail/openvas-announce/2013-November/000157.html
http://www.openvas.org/OVSA20131108.html
http://www.openwall.com/lists/oss-security/2013/11/10/2

Get alerted when CVE-2013-6765 or the next vulnerability affects your stack