CVE-2006-3838

CVE-2006-3838 corresponds to multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0. The vulnerabilities affect ESA components and OEM integrations: the Syslog daemon (syslogserver.exe) accepts long arguments via commands such as DELTAINTERVAL, LOGFOL...

CVE-2007-2059

CVE-2007-2059 concerns the eIQnetworks Enterprise Security Analyzer (ESA) 2.5. The vulnerability stems from multiple buffer overflows in the ESA protocol implementation that occur when a long parameter is sent to any of the following commands: DELETESEARCHFOLDER, DELTASK, HMGR_CHECKHOSTSCSV, TASK...

CVE-2007-0228

The CVE-2007-0228 entry affects the DataCollector service of EIQ Networks Network Security Analyzer. A malformed string sent over TCP port 10618 (including sequences like &CONNECTSERVER&, &ADDENTRY&, &FIN&, &START&, &LOGPATH&, &FWADELTA&, &FWALOG&, &SETSYNCHRONOUS&, &SETPRGFILE&, or &SETREPLYPORT...

CVE-2007-5699

Affected software: eIQnetworks Enterprise Security Analyzer (ESA) 2.5 and ESA License Manager