CVE-2006-3838：詳細資料

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and possibly other products, allow remote attackers to execute arbitrary code via long (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, and (12) EDITPOLICY commands to the Syslog daemon (syslogserver.exe); (13) GUIADDDEVICE, (14) ADDDEVICE, and (15) DELETEDEVICE commands to the Topology server (Topology.exe); the (15) LICMGR_ADDLICENSE command to the License Manager (EnterpriseSecurityAnalyzer.exe); the (16) TRACE and (17) QUERYMONITOR commands to the Monitoring agent (Monitoring.exe); and possibly other vectors related to the Syslog daemon (syslogserver.exe).

相關弱點

指標

EPSS

EPSS 評分

EPSS 百分位數

漏洞利用資訊

Exploit Database EDB-ID : 16451

發布日期 : 2010-09-19 22h00 +00:00
作者 : Metasploit
EDB 已驗證 : Yes

Exploit Database EDB-ID : 16438

發布日期 : 2010-09-19 22h00 +00:00
作者 : Metasploit
EDB 已驗證 : Yes

Exploit Database EDB-ID : 2074

發布日期 : 2006-07-25 22h00 +00:00
作者 : ri0t
EDB 已驗證 : Yes

Exploit Database EDB-ID : 2075

發布日期 : 2006-07-25 22h00 +00:00
作者 : ri0t
EDB 已驗證 : Yes

Exploit Database EDB-ID : 2140

發布日期 : 2006-08-06 22h00 +00:00
作者 : ri0t
EDB 已驗證 : Yes

Exploit Database EDB-ID : 2080

發布日期 : 2006-07-26 22h00 +00:00
作者 : Kevin Finisterre
EDB 已驗證 : Yes

相關產品

設定 0

Eiqnetworks>>Enterprise_security_analyzer >> Version 至（含） 2.4.0

參考資料