CVE-2014-5210 Information

Description

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request a different vulnerability than CVE-2014-3804 and CVE-2014-3805.

Reference

http://forums.alienvault.com/discussion/2690 http://www.securityfocus.com/bid/69239 http://www.zerodayinitiative.com/advisories/ZDI-14-294/ http://www.zerodayinitiative.com/advisories/ZDI-14-295/