BugTraq
AlienVault OSSIM SQL Injection vulnerability Feb 06 2014 02:46PM
jakx ppr gmail com
INDEX
---------------------------------------
1. Background
2. Description
3. Affected Products
4. Vulnerability
5. Solution
6. Credit
7. Disclosure Timeline

1. BACKGROUND
---------------------------------------
OSSIM by AlienVault is an Open Source Security Information and Event Management (SIEM) platform, comprising a collection of tools designed to aid network administrator in computer security, intrusion detection and prevention.
(Wikipedia)

2. DESCRIPTION
---------------------------------------
A vulnerability has been discovered in the OSSIM's OCS Inventory web interface due to insufficient input validation before inserting untrusted, user-supplied data into a SQL query.

3. AFFECTED PRODUCTS
---------------------------------------
AlienVault OSSIM 4.3

4. VULNERABILITIES
---------------------------------------

4.1 /ocsreports/tele_stats.php

4.11 The associated query was confirmed to be running with 'root' user privileges

5. SOLUTION
---------------------------------------
Vendor contacted and confirmed that vulnerable application was removed in recent versions. Upgrade to latest version.

http://forums.alienvault.com/discussion/1873/security-advisory-all-alien
vault-versions-prior-to-v4-3-3-1

6. CREDIT
---------------------------------------
This vulnerability was discovered by Andrew Smith.

7. DISCLOSURE TIMELINE
---------------------------------------
1-18-2014 - Vulnerability Discovered
1-27-2014 - Vendor Informed
2-3-2014 - Public Disclosure

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus