Alienvault Open Source SIEM (OSSIM) < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution

Exploit Title: AlienVault OSSIM uri'AV/CC/Util' - proxy'https://172.26.22.2:40007/av-centerd' - getlogline'All', '423d7bea-cfbc-f7ea-fe52-272ff7ede3d2' ,'172.26.22.1', 'test', '/var/log/auth.log', '1;id;' - result; for @ $soapresponse0 print "$\n"; If vulnerable output will be: uid=0root gid=0roo...

OSSIM tele_compress.php Directory Traversal

The OSSIM install hosted on the remote host has a directory traversal vulnerability. Input to the 'timestamp' parameter of the '/ossim/ocsreports/telecompress.php' script is not properly sanitized. A remote attacker could exploit this to download arbitrary files, subject to the privileges under...

CVE-2014-4152: Improper Control of Generation of Code

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remotetask request, related to injecting an ssh public key...

Alienvault Open Source SIEM (OSSIM) 4.7.0 - av-centerd get_log_line() Remote Code Execution

Alienvault Open Source SIEM OSSIM 4.7.0 - av-centerd getlogline Remote Code Execution Exploit Title: AlienVault OSSIM uri'AV/CC/Util' - proxy'https://172.26.22.2:40007/av-centerd' - getlogline'All', '423d7bea-cfbc-f7ea-fe52-272ff7ede3d2' ,'172.26.22.1', 'test', '/var/log/auth.log', '1;id;' -...

CVE-2014-4151: Improper Control of Generation of Code

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted setfile request...

CVE-2014-4153: Exposure of Sensitive Information to an Unauthorized Actor

The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read arbitrary files via a crafted getfile request...

CVE-2014-3804

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 updatesysteminfodebianpackage, 2 ossectask, 3 setossimsetup adminip, 4 syncrserver, or 5 setossimsetup frameworkip request, a different vulnerability than CVE-2014-38...

CVE-2014-3805

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 getlicense, 2 getlogline, or 3 updatesystem/upgradeproweb request, a different vulnerability than CVE-2014-3804...

Cross site request forgery (csrf)

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 getlicense, 2 getlogline, or 3 updatesystem/upgradeproweb request, a different vulnerability than CVE-2014-3804...

Design/Logic Flaw

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 updatesysteminfodebianpackage, 2 ossectask, 3 setossimsetup adminip, 4 syncrserver, or 5 setossimsetup frameworkip request, a different vulnerability than CVE-2014-38...

CVE-2014-3804

CVE-2014-3804 affects AlienVault OSSIM’s av-centerd SOAP service (before 4.7.0). It enables remote command execution via crafted av-centerd SOAP requests (e.g., sync_rserver, update_system_info_debian_package, ossec_task, set_ossim_setup admin_ip, set_ossim_setup framework_ip). Public references ...

CVE-2014-3805

CVE-2014-3805 affects AlienVault OSSIM (av-centerd SOAP service) prior to 4.7.0. The vulnerability is a command-injection flaw in the Util.pm get_license path (and related get_log_line/update_system/upgrade_pro_web flows) caused by unsanitized user input, allowing remote unauthenticated execution...

CVE-2014-3804

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 updatesysteminfodebianpackage, 2 ossectask, 3 setossimsetup adminip, 4 syncrserver, or 5 setossimsetup frameworkip request, a different vulnerability than CVE-2014-38...

CVE-2014-3805

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted 1 getlicense, 2 getlogline, or 3 updatesystem/upgradeproweb request, a different vulnerability than CVE-2014-3804...

AlienVault OSSIM av-centerd Util.pm set_file Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AlienVault OSSIM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the av-centerd SOAP service. The issue lies in the handling of setfile requests...

AlienVault OSSIM av-centerd Util.pm remote_task Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AlienVault Ossim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the av-centerd SOAP service. The issue lies in the handling of the remotetask request...

Alienvault Open Source SIEM (OSSIM) < 4.8.0 - 'get_file' Information Disclosure (Metasploit)

require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm getfile Information Disclosure', 'Description' = %q This module exploits an information disclosure vulnerability found within the getfile function in Util.pm. The vulnerability exists because of an unsanitized $rfile...

PT-2014-5705

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 4.8.0 Description The issue allows remote attackers to read arbitrary files via a crafted get file request to the av-centerd SOAP service. This is related to the Util.pm module. Recommendations For versions...

PT-2014-5704

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 4.8.0 Description The issue allows remote attackers to execute arbitrary code via a crafted remote task request. This is related to injecting an ssh public key through the av-centerd SOAP service...

Alienvault Open Source SIEM (OSSIM) 4.8.0 - get_file Information Disclosure (Metasploit)

Alienvault Open Source SIEM OSSIM 4.8.0 - getfile Information Disclosure Metasploit require 'msf/core' class MetasploitModule 'Alienvault OSSIM av-centerd Util.pm getfile Information Disclosure', 'Description' = %q This module exploits an information disclosure vulnerability found within the...