Test ID:	1.3.6.1.4.1.25623.1.0.801979
Category:	Privilege escalation
Title:	OpenVAS Scanner Symlink Attack Local Privilege Escalation Vulnerability
Summary:	OpenVAS Scanner is prone to a privilege escalation vulnerability.
Description:	Summary: OpenVAS Scanner is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to the application passing a predictable temporary filename to the '-r' parameter of the ovaldi application, which can be exploited to overwrite arbitrary files via symlink attacks. NOTE: This vulnerability exists when ovaldi support enabled. Vulnerability Impact: Successful exploitation allows local user on a client or server system can gain access to the administrator or root account thus taking full control of the system. Affected Software/OS: OpenVAS Project OpenVAS Scanner 3.2.4. Solution: Upgrade to OpenVAS Scanner 4 or later. CVSS Score: 6.6 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3351 https://access.redhat.com/security/cve/cve-2011-3351 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3351 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2011-3351 https://security-tracker.debian.org/tracker/CVE-2011-3351
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.