eIQnetworks Enterprise Security Analyzer Syslog server buffer overflow

Overview The eIQnetworks Enterprise Security Analyzer Syslog server contains a buffer overflow vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Enterprise Security Analyzer eIQnetworks Enterprise Security Analyzer ESA...

CVE-2006-3838

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer ESA before 2.5.0, as used in products including a Sidewinder, b iPolicy Security Manager, c Astaro Report Manager, d Fortinet FortiReporter, e Top Layer Network Security Analyzer, and possibly other products, allow...

CVE-2006-3838

CVE-2006-3838 corresponds to multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0. The vulnerabilities affect ESA components and OEM integrations: the Syslog daemon (syslogserver.exe) accepts long arguments via commands such as DELTAINTERVAL, LOGFOL...

[Full-disclosure] Checkpoint SecureClient NGX Security Policy can easily be disabled

Situation: Employees should be allowed to access your company network from remote by VPN. You want to make sure, that only the hardware of your own company is allowed to access the network on the VPN. This because your company hardware uses a hardened operating system personal firewall,...

Confluence – the Enterprise Wiki, XSS vuln.

Confluence – the Enterprise Wiki, XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html Vendor:http://www.atlassian.com/software/confluence/ affected version: 2.0.1 Build:321 Nov 28, 2005 Product...

Exploit for Tarantella Enterprise 3 installation (BID 3966)

Tarantella addressed these issues in a security bulletin: http://www.tarantella.com/security/bulletin-04.html !/usr/bin/perl -w Another Exploit for tarantella enterprise 3 installation. Larry Cashdollar [email protected] 2/08/2002 Exploits gunzip$$ binary being created in /tmp with perm 777...