Multiple vulnerabilities have been reported in eIQnetworks Enterprise Security Analyzer, which can be exploited by malicious people to compromise a vulnerable system.

1) A boundary error in the syslog daemon (SyslogServer.exe) when processing data sent to the TCP port can be exploited to cause a buffer overflow by sending an overly long string to the service.

Successful exploitation requires that the TCP port is exposed (not default setting).

2) A boundary error in EnterpriseSecurityAnalyzer.exe within the license manager (port 10616/TCP) can be exploited to cause a stack-based buffer overflow by passing an overly long argument to the "LICMGR_ADDLICENSE" command.

3) A boundary error in the Topology service (Topology.exe) can be exploited to cause a stack-based buffer overflow via overly long prefixes to the "GUIADDDEVICE", "ADDDEVICE", and "DELETEDEVICE" commands.

4) Another boundary error in the syslog service can be exploited to cause a buffer overflow by passing an overly long string as argument to the following commands:
* DELTAINTERVAL
* LOGFOLDER
* DELETELOGS
* FWASERVER
* SYSLOGPUBLICIP
* GETFWAIMPORTLOG
* GETFWADELTA
* DELETERDEPDEVICE
* COMPRESSRAWLOGFILE
* GETSYSLOGFIREWALLS
* ADDPOLICY
* EDITPOLICY

5) Boundary errors in the Monitoring service (Monitoring.exe) listening on port 9999/TCP can be exploited to cause buffer overflow by passing an overly long string to e.g. the "TRACE" or "QUERYMONITOR" command.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution
Update to version 2.5.0.

Provided and/or discovered by
1) Discovered by Titon, JxT, KF and the rest of Bastard Labs and reported via ZDI.
2) Discovered by Titon, JxT, KF and the rest of Bastard Labs and reported via ZDI.
3) Cody Pierce, TippingPoint Security Research Team.
4) Cody Pierce, TippingPoint Security Research Team.
5) Pedram Amini, TippingPoint Security Research Team.

Changelog
Further details available to Secunia VIM customers

Original Advisory
eIQnetworks:
http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-06-023.html
http://www.zerodayinitiative.com/advisories/ZDI-06-024.html

TippingPoint:
http://www.tippingpoint.com/security/advisories/TSRT-06-03.html
http://www.tippingpoint.com/security/advisories/TSRT-06-04.html
http://www.tippingpoint.com/security/advisories/TSRT-06-07.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers