Secunia
Login
|
|
CVE Reference: CVE-2006-3838 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-3838 |
|
|
Description: Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and possibly other products, allow remote attackers to execute arbitrary code via long (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, and (12) EDITPOLICY commands to the Syslog daemon (syslogserver.exe); (13) GUIADDDEVICE, (14) ADDDEVICE, and (15) DELETEDEVICE commands to the Topology server (Topology.exe); the (15) LICMGR_ADDLICENSE command to the License Manager (EnterpriseSecurityAnalyzer.exe); the (16) TRACE and (17) QUERYMONITOR commands to the Monitoring agent (Monitoring.exe); and possibly other vectors related to the Syslog daemon (syslogserver.exe). |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/27950 http://xforce.iss.net/xforce/xfdb/27954 http://xforce.iss.net/xforce/xfdb/27952 http://xforce.iss.net/xforce/xfdb/27951 http://xforce.iss.net/xforce/xfdb/27953 ST 1016580 SAID Secunia Advisory: SA21217 Secunia Advisory: SA21213 Secunia Advisory: SA21211 Secunia Advisory: SA21214 Secunia Advisory: SA21215 Secunia Advisory: SA21218 OSVDB 27528 27527 27525 27526 MISC http://www.zerodayinitiative.com/advisories/ZDI-06-024.html http://www.tippingpoint.com/security/advisories/TSRT-06-03.html http://www.zerodayinitiative.com/advisories/ZDI-06-023.html http://www.tippingpoint.com/security/advisories/TSRT-06-04.html http://www.tippingpoint.com/security/advisories/TSRT-06-07.html CONFIRM http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf CERT-VN 513068 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/441195/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/441197/100/0/threaded http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html http://www.securityfocus.com/archive/1/archive/1/441198/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/441200/100/0/threaded BID 19165 19167 19163 19164 |
|
| Return to the previous page. |
