CVE-2007-2059 Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELE...
HighCVSS 10.0
EPSS 7.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELETESEARCHFOLDER, (2) DELTASK, (3) HMGR_CHECKHOSTSCSV, (4) TASKUPDATEDUSER, (5) VERIFYUSERKEY, or (6) VERIFYPWD command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eiqnetworks enterprise security analyzer | = 2.5 | No fix listed |
References
- 24881 patch third-party-advisory vendor-advisory
- www.infigo.hr vendor-advisory
- 20070412 INFIGO-2007-04-05: Enterprise Security Analyzer server remotebuffer overflows mailing-list
- ADV-2007-1380 vdb-entry
- eiqnetworks-esa-multiple-commands-bo(33646) vdb-entry