CVE-2014-3804: Code Injection

Q: What is the severity of CVE-2014-3804?

CVE-2014-3804 is considered to be a high-severity vulnerability allowing arbitrary command execution.

Q: How do I fix CVE-2014-3804?

To fix CVE-2014-3804, upgrade AlienVault OSSIM to version 4.7.0 or later.

Q: What versions of AlienVault OSSIM are affected by CVE-2014-3804?

CVE-2014-3804 affects AlienVault OSSIM versions prior to 4.7.0, including 4.0 to 4.6.1.

Q: What type of vulnerabilities are associated with CVE-2014-3804?

CVE-2014-3804 allows remote attackers to exploit several functions via crafted SOAP requests.

Q: Is remote code execution possible with CVE-2014-3804?

Yes, CVE-2014-3804 allows remote code execution through unauthorized SOAP service requests.

Published Jun 13, 2014

Updated

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) updatesysteminfodebianpackage, (2) ossectask, (3) setossimsetup adminip, (4) syncrserver, or (5) setossimsetup frameworkip request, a different vulnerability than CVE-2014-3805.

Affected Software

17 affected components

AlienVault Open Source Security Information Management<=4.6.1

AlienVault Open Source Security Information Management=4.0

AlienVault Open Source Security Information Management=4.0.3

AlienVault Open Source Security Information Management=4.0.4

AlienVault Open Source Security Information Management=4.1

AlienVault Open Source Security Information Management=4.1.2

AlienVault Open Source Security Information Management=4.1.3

AlienVault Open Source Security Information Management=4.2

AlienVault Open Source Security Information Management=4.2.2

AlienVault Open Source Security Information Management=4.2.3

AlienVault Open Source Security Information Management=4.3

AlienVault Open Source Security Information Management=4.3.1

AlienVault Open Source Security Information Management=4.3.2

AlienVault Open Source Security Information Management=4.3.3

AlienVault Open Source Security Information Management=4.4

AlienVault Open Source Security Information Management=4.5

AlienVault Open Source Security Information Management=4.6

Event History

Jun 13, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-3804?

CVE-2014-3804 is considered to be a high-severity vulnerability allowing arbitrary command execution.

How do I fix CVE-2014-3804?

To fix CVE-2014-3804, upgrade AlienVault OSSIM to version 4.7.0 or later.

What versions of AlienVault OSSIM are affected by CVE-2014-3804?

CVE-2014-3804 affects AlienVault OSSIM versions prior to 4.7.0, including 4.0 to 4.6.1.

What type of vulnerabilities are associated with CVE-2014-3804?

CVE-2014-3804 allows remote attackers to exploit several functions via crafted SOAP requests.

Is remote code execution possible with CVE-2014-3804?