CVE

Id
41808  
CVE No.
CVE-2009-4373  
Status
Candidate  
Description
Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in ossiminstall/uploads/.  
Phase
Assigned (20091221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
458735 41808 CVE-2009-4373 MISC:http://www.cybsec.com/vuln/OSSIM_2_1_5%20_Arbitrary_File_Upload.pdf  View
458736 41808 CVE-2009-4373 CONFIRM:http://www.alienvault.com/community.php?section=News  View
458737 41808 CVE-2009-4373 SECUNIA:37727  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41532 JVNDB-2009-002539 Wireshark の SMB および SMB2 解析部におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の SMB および SMB2 解析部には、パケットの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-4377 41808 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002539.html  View