CVE-2014-5158: Improper Control of Generation of Code

The 1 av-centerd SOAP service and 2 backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors...

PT-2014-6306

Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 4.6.0 Description The issue allows remote attackers to execute arbitrary commands. This is possible through the av-centerd SOAP service and the backup command in the ossim-framework service. Recommendations F...

AlienVault OSSIM backup Command Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AlienVault OSSIM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ossim-framework service. The issue lies in the handling of the backup command due...