AlienVault OSSIM CVE-2014-3804 Multiple Unspecified Remote Code Execution Vulnerabilities

Bugtraq ID:	67999
Class:	Input Validation Error
CVE:	CVE-2014-3804
Remote:	Yes
Local:	No
Published:	May 06 2014 12:00AM
Updated:	Jun 20 2014 05:24AM
Credit:	HP Zero Day Initiative
Vulnerable:
Not Vulnerable:

AlienVault OSSIM CVE-2014-3804 Multiple Unspecified Remote Code Execution Vulnerabilities

AlienVault OSSIM is prone to multiple unspecified remote code-execution vulnerabilities because it fails to sufficiently sanitize user-supplied input.

An attacker can leverage these issues to execute arbitrary code with root privileges.

AlienVault OSSIM 4.6.1 and prior are vulnerable.

Note: These issues were previously covered in BID 67312 (AlienVault OSSIM and Unified Security Management Multiple Security Vulnerabilities), but have been given their own record for better documentation.

AlienVault OSSIM CVE-2014-3804 Multiple Unspecified Remote Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AlienVault OSSIM CVE-2014-3804 Multiple Unspecified Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

AlienVault OSSIM CVE-2014-3804 Multiple Unspecified Remote Code Execution Vulnerabilities

References:

• Alienvault Homepage (Alienvault)