CVE-2014-3804
HighSummary
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted requests related to system info updates, ossec tasks, and admin_ip or framework_ip settings.
Risk Assessment
Exploitation of this vulnerability could lead to full system compromise, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to version 4.7.0 or later to mitigate this vulnerability and to monitor the system for potential attack attempts.
Other vulnerabilities in av-centerd SOAP service
See all- CVE-2014-5210High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted remote_task or get_license requests.
- CVE-2014-4153High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
- CVE-2014-4151High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.
Original NVD description (English source)
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a different vulnerability than CVE-2014-3805.