Authentication flaw

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled...

Design/Logic Flaw

BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection...

CVE-2007-0433

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled...

CVE-2007-0434

BEA AquaLogic Enterprise Security 2.0–2.2 (AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2) has a vulnerability where audit-event severity is not properly set under high system load. This can hinder detection by bypassing or delaying alerting, potentially reducing ...

CVE-2007-0434

BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection...

CVE-2007-0433

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled...

For the domestic Enterprise Security ten vulnerabilities-vulnerability warning-the black bar safety net

The growing dependence on Internet applications in the modern enterprise, evolving security threats and changing regulatory standards so that the maintenance of a trusted network environment becomes a major problem. In today's global economic environment, the company enterprise has never been...

Symantec Enterprise Security Manager拒绝服务漏洞

Symantec Enterprise Security Manager（ESM）可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 如果能够模拟为ESM代理向管理器服务器发送特制的请求的话，就会导致ESM管理器和代理都锁定，必须重启才能恢复正常运行。 Symantec Enterprise Security Manager 6.5.2 Symantec Enterprise Security Manager 6.5.1 Symantec Enterprise Security Manager 6.5 Symantec Enterprise...

eIQNetworks Enterprise Security Analyzer Monitoring.exe多个缓冲区溢出漏洞

eIQnetworks Enterprise Security Analyzer（ESA）是一款企业级的安全管理平台。 ESA的Monitoring.exe进程中存在两个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 第一个漏洞存在于Monitoring.exe中负责处理TCP 9999端口上用户数据的例程中。如果连接到这个端口，用户就会立即被提示输入口令。这时可以发送HELP命令获得各种命令帮助： --------------------------------------------------------- Usage: QUERYMONITOR: to fetc...

eIQNetworks ESA Topology DELETEDEVICE Overflow

This module exploits a stack buffer overflow in eIQnetworks Enterprise Security Analyzer. During the processing of long arguments to the DELETEDEVICE command in the Topology server, a stack-based buffer overflow occurs. This module has only been tested against ESA v2.1.13. This module requires...

DoS против Symantec Enterprise Security Manager

Malcrafted request can be used to lockup server and agent...

eIQnetworks Enterprise Security Analyzer Monitoring Agent Detection

The remote host is running a monitoring agent from eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet...

eIQNetworks Enterprise Security Analyzer multiple security vulnerabilities

License manager, syslog server, topology server buffer overflows...

TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities

TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities http://www.tippingpoint.com/security/advisories/TSRT-06-07.html August 8, 2006 -- CVE ID: CVE-2006-3838 -- Affected Vendor: eIQnetworks -- Affected Products: Enterprise Security Analyzer --...

eIQnetworks License Manager Remote Buffer Overflow Exploit (multi)

No description provided by source. !/usr/bin/perl -w package Msf::Exploit::EiQLicense; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'EIQ License Manager Overflow', 'Authors' = 'ri0t [email protected] KF [email protected]' , 'Arch' = 'x86' , 'OS'...

eIQnetworks License Manager - Remote Buffer Overflow (Metasploit) (3)

!/usr/bin/perl -w package Msf::Exploit::EiQLicense; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'EIQ License Manager Overflow', 'Authors' = 'ri0t [email protected] KF [email protected]' , 'Arch' = 'x86' , 'OS' = 'win32', 'win2000', 'winxp' ,...

eIQnetworks License Manager Remote Buffer Overflow Exploit (multi)

Exploit for unknown platform in category remote exploits ================================================================== eIQnetworks License Manager Remote Buffer Overflow Exploit multi ================================================================== !/usr/bin/perl -w package...

eIQnetworks Enterprise Security Analyzer Topology Server Detection

The remote host is running a topology server from eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22133;...

eIQnetworks Enterprise Security Analyzer License Manager Detection

The remote host is running a license manager for eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter...

eIQnetworks Enterprise Security Analyzer EnterpriseSecurityAnalyzer.exe LICMGR_ADDLICENSE Command Remote Overflow

The version of eIQnetworks Enterprise Security Analyzer, Network Security Analyzer, or one of its OEM versions installed on the remote host contains a buffer overflow in its License Manager service. Using a long argument to the 'LICMGRADDLICENSE' command, an unauthenticated remote attacker may be...