This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
APP:MISC:ALIENVALT-BAKUP-COM-RE
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
APP
|
Keywords |
AlienVault OSSIM Backup Command Unspecified Remote Command Execution
|
Release Date |
2014/10/15
|
Update Number |
2430
|
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
AlienVault OSSIM Backup Command Unspecified Remote Command Execution
This signature detects attempts to exploit a known vulnerability against AlienVault OSSIM. A successful attack could result in command execution with root privileges.
Extended Description
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Products
- Alienvault open_source_security_information_management 1.0.4
- Alienvault open_source_security_information_management 1.0.6
- Alienvault open_source_security_information_management 2.1
- Alienvault open_source_security_information_management 2.1.2
- Alienvault open_source_security_information_management 2.1.5
- Alienvault open_source_security_information_management 2.1.5-1
- Alienvault open_source_security_information_management 2.1.5-2
- Alienvault open_source_security_information_management 2.1.5-3
- Alienvault open_source_security_information_management 3.1
- Alienvault open_source_security_information_management 3.1.10
- Alienvault open_source_security_information_management 3.1.12
- Alienvault open_source_security_information_management 3.1.9
- Alienvault open_source_security_information_management 4.0
- Alienvault open_source_security_information_management 4.0.3
- Alienvault open_source_security_information_management 4.0.4
- Alienvault open_source_security_information_management 4.1
- Alienvault open_source_security_information_management 4.1.2
- Alienvault open_source_security_information_management 4.1.3
- Alienvault open_source_security_information_management 4.2
- Alienvault open_source_security_information_management 4.2.2
- Alienvault open_source_security_information_management 4.2.3
- Alienvault open_source_security_information_management 4.3
- Alienvault open_source_security_information_management 4.3.1
- Alienvault open_source_security_information_management 4.3.2
- Alienvault open_source_security_information_management 4.3.3
- Alienvault open_source_security_information_management 4.4
- Alienvault open_source_security_information_management 4.5
References