NVD

Id
51495  
Name
CVE-2009-4372  
Description
AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary commands via shell metacharacters in the uniqueid parameter to (1) wcl.php, (2) storage_graphs.php, (3) storage_graphs2.php, (4) storage_graphs3.php, and (5) storage_graphs4.php in sem/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-21  
Modified Date
2010-06-29  
Seq
2009-4372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261201 51495 CVE-2009-4372 http://www.alienvault.com/community.php?section=News  View
261202 51495 CVE-2009-4372 http://www.cybsec.com/vuln/OSSIM_2_1_5_Remote_Command_Execution.pdf  View
261203 51495 CVE-2009-4372 10480  View
261204 51495 CVE-2009-4372 37375  View
261205 51495 CVE-2009-4372 ossim-uniqueid-command-execution(54843)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42965 JVNDB-2009-003972 AlienVault OSSIM における任意のコマンドを実行される脆弱性 AlienVault Open Source Security Information Management (OSSIM) には、任意のコマンドを実行される脆弱性が存在します。 CVE-2009-4372 41803 CVE-2009-4372 51495 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003972.html 2009-12-21 2012-06-26 View