|
eIQnetworks Enterprise Security Analyzer Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA21211
|
|
|
Release Date:
|
2006-07-26
|
|
Last Update:
|
2006-08-09
|
|
Popularity:
|
7,566 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | eIQnetworks Enterprise Security Analyzer 2.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Multiple vulnerabilities have been reported in eIQnetworks Enterprise Security Analyzer, which can be exploited by malicious people to compromise a vulnerable system.
1) A boundary error in the syslog daemon (SyslogServer.exe) when processing data sent to the TCP port can be exploited to cause a buffer overflow by sending an overly long string to the service.
Successful exploitation requires that the TCP port is exposed (not default setting).
2) A boundary error in EnterpriseSecurityAnalyzer.exe within the license manager (port 10616/TCP) can be exploited to cause a stack-based buffer overflow by passing an overly long argument to the "LICMGR_ADDLICENSE" command.
3) A boundary error in the Topology service (Topology.exe) can be exploited to cause a stack-based buffer overflow via overly long prefixes to the "GUIADDDEVICE", "ADDDEVICE", and "DELETEDEVICE" commands.
4) Another boundary error in the syslog service can be exploited to cause a buffer overflow by passing an overly long string as argument to the following commands:
* DELTAINTERVAL
* LOGFOLDER
* DELETELOGS
* FWASERVER
* SYSLOGPUBLICIP
* GETFWAIMPORTLOG
* GETFWADELTA
* DELETERDEPDEVICE
* COMPRESSRAWLOGFILE
* GETSYSLOGFIREWALLS
* ADDPOLICY
* EDITPOLICY
5) Boundary errors in the Monitoring service (Monitoring.exe) listening on port 9999/TCP can be exploited to cause buffer overflow by passing an overly long string to e.g. the "TRACE" or "QUERYMONITOR" command.
Successful exploitation of the vulnerabilities allows execution of arbitrary code.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
