← Back to branch summary

~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to active/CVE-2013-5321

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
active/CVE-2013-5321
1
 
Candidate: CVE-2013-5321
2
 
PublicDate: 2013-08-20
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5321
5
 
 http://www.exploit-db.com/exploits/26406
6
 
Description:
7
 
 Multiple SQL injection vulnerabilities in AlienVault Open Source Security
8
 
 Information Management (OSSIM) 4.1 allow remote attackers to execute
9
 
 arbitrary SQL commands via the (1) sensor parameter in a Query action to
10
 
 forensics/base_qry_main.php; the (2) tcp_flags[] or (3) tcp_port[0][4]
11
 
 parameter to forensics/base_stat_alerts.php; the (4) ip_addr[1][8] or (5)
12
 
 port_type parameter to forensics/base_stat_ports.php; or the (6) sortby or
13
 
 (7) rvalue parameter in a search action to vulnmeter/index.php.
14
 
Ubuntu-Description:
15
 
Notes:
16
 
Bugs:
17
 
Priority: medium
18
 
Discovered-by: Glafkos Charalambous
19
 
Assigned-to:
20
 
 
21
 
Patches_ossim:
22
 
upstream_ossim: needed
23
 
lucid_ossim: ignored (reached end-of-life)
24
 
precise_ossim: ignored (reached end-of-life)
25
 
precise/esm_ossim: DNE (precise was needed)
26
 
quantal_ossim: ignored (reached end-of-life)
27
 
raring_ossim: ignored (reached end-of-life)
28
 
saucy_ossim: ignored (reached end-of-life)
29
 
trusty_ossim: needed
30
 
utopic_ossim: ignored (reached end-of-life)
31
 
vivid_ossim: ignored (reached end-of-life)
32
 
vivid/stable-phone-overlay_ossim: DNE
33
 
vivid/ubuntu-core_ossim: DNE
34
 
wily_ossim: ignored (reached end-of-life)
35
 
xenial_ossim: needed
36
 
yakkety_ossim: ignored (reached end-of-life)
37
 
zesty_ossim: ignored (reached end-of-life)
38
 
artful_ossim: needed
39
 
bionic_ossim: needed
40
 
devel_ossim: needed