CVE-2014-3805 Information

Description

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) get_license (2) get_log_line or (3) update_system/upgrade_pro_web request a different vulnerability than CVE-2014-3804.

Reference

http://forums.alienvault.com/discussion/2690 http://zerodayinitiative.com/advisories/ZDI-14-198/ http://zerodayinitiative.com/advisories/ZDI-14-199/ http://zerodayinitiative.com/advisories/ZDI-14-204/ https://www.exploit-db.com/exploits/42709/