Approved changes feed: RSS · Atom

cpe:2.3:a:openvas:openvas_manager:4.0:beta1:*:*:*:*:*:*

part: a version: 4.0 update: beta1

VendorOpenvas (d1dce7aa-83f1-5f28-a26a-3aaf044d97c0)
ProductOpenvas Manager (8cccef25-2d55-5758-adaa-37432dc4b49c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/openvas::omp purl2cpe 2026-06-01 10:10:58.479814
pkg:deb/ubuntu/openvas-manager purl2cpe 2026-06-01 10:10:58.479816
pkg:docker/camptocamp/openvas-manager purl2cpe 2026-06-01 10:10:58.479817
pkg:github/greenbone/gvmd purl2cpe 2026-06-01 10:10:58.479818
pkg:gitlab/kalilinux/openvas-manager purl2cpe 2026-06-01 10:10:58.479820
pkg:pypi/openvas-lib purl2cpe 2026-06-01 10:10:58.479821
pkg:rpm/fedora/openvas-manager purl2cpe 2026-06-01 10:10:58.479822
pkg:rpm/opensuse/openvas-manager purl2cpe 2026-06-01 10:10:58.479824

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6765 vulnerable 2026-06-08 05:05:06.869106 Details available
OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENTIC, as demonstrated by the omp_xml_handle_end_element function in omp.c.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-08-06T17:46:23.772Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.