Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:MISC:ALIENVALT-BAKUP-COM-RE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
AlienVault OSSIM Backup Command Unspecified Remote Command Execution |
Release Date |
2014/10/15 |
Update Number |
2430 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
AlienVault OSSIM Backup Command Unspecified Remote Command Execution
This signature detects attempts to exploit a known vulnerability against AlienVault OSSIM. A successful attack could result in command execution with root privileges.
Extended Description
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Products
- Alienvault open_source_security_information_management 1.0.4
- Alienvault open_source_security_information_management 1.0.6
- Alienvault open_source_security_information_management 2.1
- Alienvault open_source_security_information_management 2.1.2
- Alienvault open_source_security_information_management 2.1.5
- Alienvault open_source_security_information_management 2.1.5-1
- Alienvault open_source_security_information_management 2.1.5-2
- Alienvault open_source_security_information_management 2.1.5-3
- Alienvault open_source_security_information_management 3.1
- Alienvault open_source_security_information_management 3.1.10
- Alienvault open_source_security_information_management 3.1.12
- Alienvault open_source_security_information_management 3.1.9
- Alienvault open_source_security_information_management 4.0
- Alienvault open_source_security_information_management 4.0.3
- Alienvault open_source_security_information_management 4.0.4
- Alienvault open_source_security_information_management 4.1
- Alienvault open_source_security_information_management 4.1.2
- Alienvault open_source_security_information_management 4.1.3
- Alienvault open_source_security_information_management 4.2
- Alienvault open_source_security_information_management 4.2.2
- Alienvault open_source_security_information_management 4.2.3
- Alienvault open_source_security_information_management 4.3
- Alienvault open_source_security_information_management 4.3.1
- Alienvault open_source_security_information_management 4.3.2
- Alienvault open_source_security_information_management 4.3.3
- Alienvault open_source_security_information_management 4.4
- Alienvault open_source_security_information_management 4.5
References
- BugTraq: 68998
- CVE: CVE-2014-5158