Test ID:	1.3.6.1.4.1.25623.1.0.105048
Category:	Web application abuses
Title:	AlienVault OSSIM Multiple RCE Vulnerabilities
Summary:	AlienVault OSSIM is prone to multiple remote code execution; (RCE) vulnerabilities.
Description:	Summary: AlienVault OSSIM is prone to multiple remote code execution (RCE) vulnerabilities. Vulnerability Insight: The application fails to sufficiently sanitize user-supplied input. Vulnerability Impact: An attacker can leverage these issues to execute arbitrary code with root privileges. Affected Software/OS: AlienVault OSSIM 4.6.1 and prior are vulnerable. Solution: Updates are available. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3804 https://www.exploit-db.com/exploits/42708/ http://zerodayinitiative.com/advisories/ZDI-14-196/ http://zerodayinitiative.com/advisories/ZDI-14-197/ http://zerodayinitiative.com/advisories/ZDI-14-200/ http://zerodayinitiative.com/advisories/ZDI-14-201/ http://zerodayinitiative.com/advisories/ZDI-14-202/ Common Vulnerability Exposure (CVE) ID: CVE-2014-3805 https://www.exploit-db.com/exploits/42709/ http://zerodayinitiative.com/advisories/ZDI-14-198/ http://zerodayinitiative.com/advisories/ZDI-14-199/ http://zerodayinitiative.com/advisories/ZDI-14-204/
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.