CVE-2007-6081

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

Default configuration

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2007-6081

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2007-6081

AdventNet EventLog Analyzer (Windows, build 4030, and possibly other versions) ships a MySQL instance with a default root/passwordless account, enabling remote attackers to gain privileges and modify logs. The vulnerability is fixed in EventLog Analyzer Build 6000. Affected component: bundled MyS...

CVE-2007-6081: Undefined Security Weakness

AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "root" account without a password, which allows remote attackers to gain privileges and modify logs. Fixed in EventLog Analyzer Build 6000...

CVE-2007-5699

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer ESA 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059...

CVE-2007-5699

Affected software: eIQnetworks Enterprise Security Analyzer (ESA) 2.5 and ESA License Manager

CVE-2007-5699: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer ESA 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059...

eiqnetworks-overflow.pm.txt

$Id: eiqnetworksesa.rb 4529 2007-03-12 01:08:18Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)

eIQnetworks ESA SEARCHREPORT - Remote Overflow Metasploit $Id: eiqnetworksesa.rb 4529 2007-03-12 01:08:18Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

eIQnetworks ESA SEARCHREPORT Remote Overflow Exploit (meta)

No description provided by source. $Id: eiqnetworksesa.rb 4529 2007-03-12 01:08:18Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

eIQnetworks ESA SEARCHREPORT Remote Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits =========================================================== eIQnetworks ESA SEARCHREPORT Remote Overflow Exploit meta =========================================================== $Id: eiqnetworksesa.rb 4529 2007-03-12 01:08:18Z hdm $ This fi...

eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)

$Id: eiqnetworksesa.rb 4529 2007-03-12 01:08:18Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openSUSE 10 Security Update : ethereal (ethereal-2246)

Various problems have been fixed in the network analyzer Ethereal, most leading to crashes of the ethereal program. CVE-2006-5740: A unspecified vulnerability in the LDAP dissector could be used to crash Ethereal. CVE-2006-4574: A single \0 byte heap overflow was fixed in the MIME multipart...

SecurityReporter < 4.6.3p1 Multiple Vulnerabilities

The 'file.cgi' script included with the version of SecurityReporter installed on the remote host fails to sanitize input to the 'name' parameter before returning the contents of the specified file and supports bypassing authentication using specially crafted arguments. An unauthenticated, remote...

CVE-2007-4043

The file.cgi component in Secure Computing SecurityReporter (also known as Network Security Analyzer) versions prior to 4.6.3 contains an authentication bypass vulnerability. Remote attackers can exploit this by providing a name parameter ending with a %00.gif sequence. Additionally, a separate d...

CVE-2007-4043: Improper Authentication

file.cgi in Secure Computing SecurityReporter aka Network Security Analyzer before 4.6.3 allows remote attackers to bypass authentication via a name parameter ending with a "%00.gif" sequence. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files...

CVE-2007-3985

Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter aka Network Security Analyzer 4.6.3 allows remote attackers to download arbitrary files via a .. dot dot in the name parameter...

CVE-2007-3986

file.cgi in Secure Computing SecurityReporter aka Network Security Analyzer 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal...

Directory traversal

Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter aka Network Security Analyzer 4.6.3 allows remote attackers to download arbitrary files via a .. dot dot in the name parameter...