AlienVault OSSIM CVE-2014-3805 Multiple Unspecified Remote Code Execution Vulnerabilities

Bugtraq ID:	67998
Class:	Input Validation Error
CVE:	CVE-2014-3805
Remote:	Yes
Local:	No
Published:	May 06 2014 12:00AM
Updated:	May 06 2014 12:00AM
Credit:	agix
Vulnerable:
Not Vulnerable:

AlienVault OSSIM CVE-2014-3805 Multiple Unspecified Remote Code Execution Vulnerabilities

AlienVault OSSIM is prone to multiple unspecified remote code-execution vulnerabilities due to a failure to safely sanitize user data before executing a command.

An attacker can leverage these issues to execute arbitrary code with root privileges.

AlienVault OSSIM 4.6.1 and prior are vulnerable.

Note: These issue were previously covered in BID 67312 (AlienVault OSSIM and Unified Security Management Multiple Security Vulnerabilities), but have been given their own record for better documentation.

AlienVault OSSIM CVE-2014-3805 Multiple Unspecified Remote Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AlienVault OSSIM CVE-2014-3805 Multiple Unspecified Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

AlienVault OSSIM CVE-2014-3805 Multiple Unspecified Remote Code Execution Vulnerabilities

References:

• Alienvault Homepage (Alienvault)