OSSIM 'what' Parameter Multiple Remote Command Execution Vulnerabilities

Bugtraq ID:	38779
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 16 2010 12:00AM
Updated:	Mar 18 2010 09:02AM
Credit:	Nahuel Grisolía
Vulnerable:	OSSIM os-sim 2.2
Not Vulnerable:	OSSIM os-sim 2.2.1

OSSIM 'what' Parameter Multiple Remote Command Execution Vulnerabilities

OSSIM is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary commands because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the computer.

These issues affect OSSIM 2.2; other versions may be affected as well.

OSSIM 'what' Parameter Multiple Remote Command Execution Vulnerabilities

Solution:
The vendor has released an update to address the issue. Please see the references for more information.


OSSIM os-sim 2.2

• OSSIM alienvault-ossim-installer-2.2.1.x86.iso
  http://data.alienvault.com/alienvault-ossim-installer-2.2.1.x86.iso

OSSIM 'what' Parameter Multiple Remote Command Execution Vulnerabilities

References:

• 2010/03/11 - Some new features and security vulnerabilities fixed: Alienvault Op (OSSIM)
  
• OSSIM Homepage (OSSIM)
  
• Remote Command Execution in OSSIM (CYBSEC)