Lucene search

K
cve[email protected]CVE-2007-5699
HistoryOct 29, 2007 - 9:46 p.m.

CVE-2007-5699

2007-10-2921:46:00
CWE-119
web.nvd.nist.gov
15
cve-2007-5699
buffer overflow
eiqnetworks enterprise security analyzer
esa 2.5
remote code execution
tcp port 10616
searchreport command

8.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.2%

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059.

8.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.08 Low

EPSS

Percentile

94.2%

Related for CVE-2007-5699