CVE-2014-3804

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 72%

from disclosure to weapon11 days

Published on NVDJun 13

1st PoC+11d

metasploitMay 5

exploitation probability

72%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) update_system_info_debian_package, (2) ossec_task, (3) set_ossim_setup admin_ip, (4) sync_rserver, or (5) set_ossim_setup framework_ip request, a different vulnerability than CVE-2014-3805.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33865 exploitdbwww.exploit-db.com/exploits/42708unverified cve_referencewww.exploit-db.com/exploits/42708/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://forums.alienvault.com/discussion/2690 https://www.exploit-db.com/exploits/42708/http://zerodayinitiative.com/advisories/ZDI-14-196/http://zerodayinitiative.com/advisories/ZDI-14-197/http://zerodayinitiative.com/advisories/ZDI-14-200/http://zerodayinitiative.com/advisories/ZDI-14-201/http://zerodayinitiative.com/advisories/ZDI-14-202/