CVE-2007-1642: Undefined Security Weakness

Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL request...

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user

"ManageEngine Firewall Analyzer is a web based firewall monitoring and log analysis tool that collects, analyses, and reports information on enterprise-wide firewalls, proxy servers, and radius servers. " a authorized user to the "firewall analyzer" can access any common file on the system, it is...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

CVE-2007-1194

CVE-2007-1194 concerns Norman SandBox Analyzer and its improper IDT entry range handling. The vulnerability allows local users to determine whether the local machine is running in an emulator or a non-physical Intel-based environment, enabling malware that is harder to analyze to tailor its behav...

CVE-2007-1194: Exposure of Sensitive Information to an Unauthorized Actor

Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table IDT entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more...

Evading the Norman SandBox Analyzer

Hi all, Summary: The Norman SandBox Analyzer http://sandbox.norman.no/live.html runs malicious code samples in an emulated environment while logging their actions. In practice it is more or less impossible to make an emulated environment perfectly similar to the real thing. It is therefore possib...

Norman SandBox Analyzer detection

Malware code can detect sandbox presence and change it's behaviour...

[SECURITY] Fedora Core 6 Update: wireshark-0.99.5-1.fc6

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Null pointer dereference

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

CVE-2007-0228

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

CVE-2007-0228

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

CVE-2007-0228

The CVE-2007-0228 entry affects the DataCollector service of EIQ Networks Network Security Analyzer. A malformed string sent over TCP port 10618 (including sequences like &CONNECTSERVER&, &ADDENTRY&, &FIN&, &START&, &LOGPATH&, &FWADELTA&, &FWALOG&, &SETSYNCHRONOUS&, &SETPRGFILE&, or &SETREPLYPORT...

eiq-dos.txt

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...

CVE-2007-0228: Undefined Security Weakness

The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service service crash via a 1 &CONNECTSERVER& 2 &ADDENTRY& 3 &FIN& 4 &START& 5 &LOGPATH& 6 &FWADELTA& 7 &FWALOG& 8 &SETSYNCHRONOUS& 9 &SETPRGFILE&, or 10 &SETREPLYPORT& string to TCP...

EIQ Networks Network Security Analyzer DoS

Crash on malformed command to TCP/10618 port...

[Full-disclosure] EIQ Networks Network Security Analyzer DoS Vulnerability

Title: ------------------- EIQ Networks Network Security Analyzer DoS Vulnerability Vendor Notified: ------------------- Now? Background Info: ------------------- EIQ Networks Product Site: http://www.eiqnetworks.com/products/NetworkSecurityAnalyzer.shtml Description: ------------------- Remote...

eIQnetworks Network Security Analyzer Null Pointer Dereference Exploit

Exploit for unknown platform in category dos / poc ====================================================================== eIQnetworks Network Security Analyzer Null Pointer Dereference Exploit ====================================================================== !c:\python\python.exe uncomment...

eIQNetworks Enterprise Security Analyzer Monitoring.exe多个缓冲区溢出漏洞

eIQnetworks Enterprise Security Analyzer（ESA）是一款企业级的安全管理平台。 ESA的Monitoring.exe进程中存在两个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 第一个漏洞存在于Monitoring.exe中负责处理TCP 9999端口上用户数据的例程中。如果连接到这个端口，用户就会立即被提示输入口令。这时可以发送HELP命令获得各种命令帮助： --------------------------------------------------------- Usage: QUERYMONITOR: to fetc...