INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows

INFIGO IS Security Advisory ADV-2007-04-01 http://www.infigo.hr/ Title: Enterprise Security Analyzer server remote buffer overflows Advisory ID: INFIGO-2007-08 Date: 2007-04-05 Advisory URL: http://www.infigo.hr/en/infocus/advisories/INFIGO-2006-08-04 Impact: Remote code execution preauth Risk...

eIQnetworks Enterprise Security Analyzer multiple buffer overflows

Buffer overflow on parsing TCP/10616 ESA Server data...

ManageEngine Firewall Analyzer任意文件信息泄露漏洞

ManageEngine Firewall Analyzer是一款防火墙分析程序。 ManageEngine Firewall Analyzer存在设计错误，远程攻击者可以利用漏洞获得敏感信息。 授权用户使用"firewall analyzer"可以访问任何系统文件，可导致获得敏感信息。 ManageEngine Firewall Analyzer 4 目前没有详细解决方案提供： http://manageengine.adventnet.com/...

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

Cross site request forgery (csrf)

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

CVE-2007-1642

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

CVE-2007-1642

Technical details about CVE-2007-1642 are not publicly provided in the supplied documents. Monitor for updates from official advisories and databases before drawing conclusions about affected versions or remediation.

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

CVE-2007-1194 concerns Norman SandBox Analyzer and its improper IDT entry range handling. The vulnerability allows local users to determine whether the local machine is running in an emulator or a non-physical Intel-based environment, enabling malware that is harder to analyze to tailor its behav...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

Evading the Norman SandBox Analyzer

Hi all, Summary: The Norman SandBox Analyzer http://sandbox.norman.no/live.html runs malicious code samples in an emulated environment while logging their actions. In practice it is more or less impossible to make an emulated environment perfectly similar to the real thing. It is therefore possib...

Norman SandBox Analyzer detection

Malware code can detect sandbox presence and change it's behaviour...

[SECURITY] Fedora Core 6 Update: wireshark-0.99.5-1.fc6

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Null pointer dereference

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

CVE-2007-0228

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

CVE-2007-0228

The CVE-2007-0228 entry affects the DataCollector service of EIQ Networks Network Security Analyzer. A malformed string sent over TCP port 10618 (including sequences like &CONNECTSERVER&, &ADDENTRY&, &FIN&, &START&, &LOGPATH&, &FWADELTA&, &FWALOG&, &SETSYNCHRONOUS&, &SETPRGFILE&, or &SETREPLYPORT...

CVE-2007-0228

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

eiq-dos.txt

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...