CVE-2014-4151
HighSummary
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise and data leakage.
Recommendation
It is recommended to upgrade to version 4.8.0 or later to mitigate this vulnerability.
Other vulnerabilities in av-centerd SOAP service
See all- CVE-2014-5210High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted remote_task or get_license requests.
- CVE-2014-4153High
The av-centerd SOAP service in AlienVault OSSIM before version 4.8.0 allows remote attackers to read arbitrary files via a crafted get_file request.
- CVE-2014-3804High
The av-centerd SOAP service in AlienVault OSSIM before version 4.7.0 allows remote attackers to execute arbitrary commands via crafted requests related to system info updates, ossec tasks, and admin_ip or framework_ip settings.
Original NVD description (English source)
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create arbitrary files and execute arbitrary code via a crafted set_file request.