CVE-2007-0228 The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service (service crash) via a (1) &CONNECTSERVER& (2) &ADDENTRY& (3) &FIN& (4) &START&....
MediumCVSS 5.0
EPSS 7.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service (service crash) via a (1) &CONNECTSERVER& (2) &ADDENTRY& (3) &FIN& (4) &START& (5) &LOGPATH& (6) &FWADELTA& (7) &FWALOG& (8) &SETSYNCHRONOUS& (9) &SETPRGFILE&, or (10) &SETREPLYPORT& string to TCP port 10618, which triggers a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eiqnetworks enterprise security analyzer | = 2.0 | No fix listed |
| eiqnetworks enterprise security analyzer | = 2.1 | No fix listed |
| eiqnetworks enterprise security analyzer | = 2.5 | No fix listed |
References
- 20070110 EIQ Networks Network Security Analyzer DoS Vulnerability exploit mailing-list
- 32725 vdb-entry
- 23693 third-party-advisory
- 21994 vdb-entry
- ADV-2007-0147 vdb-entry
- eiq-datacollector-dos(31428) vdb-entry