CVE-2007-1642

Technical details about CVE-2007-1642 are not publicly provided in the supplied documents. Monitor for updates from official advisories and databases before drawing conclusions about affected versions or remediation.

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

CVE-2007-1194 concerns Norman SandBox Analyzer and its improper IDT entry range handling. The vulnerability allows local users to determine whether the local machine is running in an emulator or a non-physical Intel-based environment, enabling malware that is harder to analyze to tailor its behav...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

Norman SandBox Analyzer detection

Malware code can detect sandbox presence and change it's behaviour...

Evading the Norman SandBox Analyzer

Hi all, Summary: The Norman SandBox Analyzer http://sandbox.norman.no/live.html runs malicious code samples in an emulated environment while logging their actions. In practice it is more or less impossible to make an emulated environment perfectly similar to the real thing. It is therefore possib...

[SECURITY] Fedora Core 6 Update: wireshark-0.99.5-1.fc6

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

CVE-2007-0228

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

Null pointer dereference

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

CVE-2007-0228

The CVE-2007-0228 entry affects the DataCollector service of EIQ Networks Network Security Analyzer. A malformed string sent over TCP port 10618 (including sequences like &CONNECTSERVER&, &ADDENTRY&, &FIN&, &START&, &LOGPATH&, &FWADELTA&, &FWALOG&, &SETSYNCHRONOUS&, &SETPRGFILE&, or &SETREPLYPORT...

CVE-2007-0228

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

eiq-dos.txt

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...

EIQ Networks Network Security Analyzer DoS

Crash on malformed command to TCP/10618 port...

[Full-disclosure] EIQ Networks Network Security Analyzer DoS Vulnerability

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...

eIQnetworks Network Security Analyzer Null Pointer Dereference Exploit

Exploit for unknown platform in category dos / poc ====================================================================== eIQnetworks Network Security Analyzer Null Pointer Dereference Exploit ====================================================================== !c:\python\python.exe uncomment...

eIQNetworks Enterprise Security Analyzer Monitoring.exe多个缓冲区溢出漏洞

eIQnetworks Enterprise Security Analyzer（ESA）是一款企业级的安全管理平台。 ESA的Monitoring.exe进程中存在两个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 第一个漏洞存在于Monitoring.exe中负责处理TCP 9999端口上用户数据的例程中。如果连接到这个端口，用户就会立即被提示输入口令。这时可以发送HELP命令获得各种命令帮助： --------------------------------------------------------- Usage: QUERYMONITOR: to fetc...

Debian DSA-1049-1 : ethereal - several vulnerabilities

Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1932 The OID printing routine is susceptible to an off-by-one error. - CVE-2006-1933 The UMA and BER...

CVE-2006-5001

Unspecified vulnerability in the log analyzer in WSFTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the 1 Files and 2 Summary tabs. NOTE: in the early publication of this identifier on 20060926, the descriptio...