The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) getlicense, (2) getlogline, or (3) updatesystem/upgradeproweb request, a different vulnerability than CVE-2014-3804.
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) updatesysteminfodebianpackage, (2) ossectask, (3) setossimsetup adminip, (4) syncrserver, or (5) setossimsetup frameworkip request, a different vulnerability than CVE-2014-3805.