CVE-2014-3804

This Metasploit module exploits a command injection vulnerability in AlienVault OSSIM's av-centerd SOAP service. It leverages insecure use of Perl backticks in the update_system_info_debian_package method to execute arbitrary commands, achieving remote code execution.

This exploit leverages a command injection vulnerability in Alienvault OSSIM's av-centerd Util.pm sync_rserver function due to an incomplete blacklist for the $uuid parameter. It sends a maliciously crafted SOAP request to execute arbitrary commands as root.

This Metasploit module exploits a command injection vulnerability in AlienVault OSSIM av-centerd SOAP web service (CVE-2014-3804). It leverages insecure use of perl backticks in the update_system_info_debian_package method to execute arbitrary commands.