eIQNetworks Enterprise Security Analyzer Monitoring.EXE Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	19424
Class:	Boundary Condition Error
CVE:	CVE-2006-3838
Remote:	Yes
Local:	No
Published:	Aug 08 2006 12:00AM
Updated:	Sep 05 2006 10:43PM
Credit:	This vulnerability was discovered by Pedram Amini, TippingPoint Security Research Team.
Vulnerable:	eIQnetworks Enterprise Security Analyzer 2.5
Not Vulnerable:

eIQNetworks Enterprise Security Analyzer Monitoring.EXE Multiple Buffer Overflow Vulnerabilities

eIQnetworks Enterprise Security Analyzer is prone to multiple remote buffer-overflow vulnerabilities.

These issues can facilitate a remote compromise due to arbitrary code execution.

Enterprise Security Analyzer versions prior to 2.5.0 are vulnerable.

eIQNetworks Enterprise Security Analyzer Monitoring.EXE Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

eIQNetworks Enterprise Security Analyzer Monitoring.EXE Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has released an update to address this issue. Please see the references for more information.

eIQNetworks Enterprise Security Analyzer Monitoring.EXE Multiple Buffer Overflow Vulnerabilities

References:

• Enterprise Security Analyzer Product Page (eIQnetworks)
  
• Release Notes Enterprise Security Analyzer v2.5.0 (eIQnetworks)
  
• TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Ove ([email protected] )