CVE-2014-3805

This exploit leverages a command injection vulnerability in AlienVault OSSIM's av-centerd service via the SOAP API. The 'get_log_line' function is abused to append arbitrary commands (e.g., 'id') to log file requests, achieving remote code execution.

This Metasploit module exploits a command injection vulnerability in AlienVault OSSIM's av-centerd service via the get_log_line function. The exploit crafts a malicious SOAP request to inject a Perl payload, achieving remote code execution.