CVE-2014-5210

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 remotetask or 2 getlicense request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805...

Sql injection

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

Cross site request forgery (csrf)

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 remotetask or 2 getlicense request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805...

Sql injection

SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-5158

The 1 av-centerd SOAP service and 2 backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-5383

SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-5159

CVE-2014-5159 affects AlienVault OSSIM prior to 4.6.0 via the ossim-framework service. The vulnerability arises from improper handling of the ws_data parameter, allowing remote attackers to inject SQL commands (no authentication required per ZDI), potentially leading to SQL execution and, per adv...

CVE-2014-5159

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

CVE-2014-5383

CVE-2014-5383 concerns an SQL injection in AlienVault OSSIM. Connected data confirms the vulnerability affects AlienVault OSSIM 4.6.1 and earlier (pre-4.7.0), with an authenticated attacker able to execute arbitrary SQL via unspecified vectors. A Metasploit module documents exploitation against n...

CVE-2014-5158

CVE-2014-5158 affects AlienVault OSSIM (before 4.6.0). The vulnerability involves two components: (1) the av-centerd SOAP service and (2) the backup command in the ossim-framework service. A remote, unauthenticated attacker can execute arbitrary commands due to improper handling/sanitization of u...

CVE-2014-5210

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 remotetask or 2 getlicense request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805...

CVE-2014-5210

CVE-2014-5210 affects the av-centerd SOAP service in AlienVault OSSIM prior to 4.7.0. The vulnerability arises from unsafe sanitization of remote_task (and get_license) SOAP requests in Util.pm, enabling remote attackers to execute arbitrary commands with root privileges. Exploitation details and...

PT-2014-6440

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 4.7.0 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 4.7.0, update to version 4.7.0 or later to resolve the issue...

CVE-2014-5210: Improper Control of Generation of Code

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 remotetask or 2 getlicense request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805...

CVE-2014-5158: Improper Control of Generation of Code

The 1 av-centerd SOAP service and 2 backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2014-5383: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-5159: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the wsdata parameter...

AlienVault Releases Intrusion Detection Systems (IDS) Best Practices

Network security practitioners rely heavily on intrusion detection systems IDS to identify malicious activity on their networks by examining network traffic in real time. IDS are available in Network NIDS and Host HIDS forms, as well as for Wireless WIDS. Host IDS is installed via an agent on the...

PT-2014-6347

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM affected versions not specified Description The issue concerns a remote code execution vulnerability. It affects the Util.pm module, specifically the remote task and get license functions. Recommendations At the moment, there ...

Alienvault Open Source SIEM (OSSIM) 4.7.0 - get_license Remote Command Execution (Metasploit)

Alienvault Open Source SIEM OSSIM 4.7.0 - getlicense Remote Command Execution Metasploit require 'msf/core' require 'rexml/document' class MetasploitModule 'Alienvault OSSIM av-centerd Command Injection getlicense', 'Description' = %q This module exploits a command injection flaw found in the...