eIQnetworks Enterprise Security Analyzer Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	23454
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 12 2007 12:00AM
Updated:	Apr 12 2007 12:00AM
Credit:	Leon Juranic is credited with discovering these issues.
Vulnerable:	eIQnetworks Enterprise Security Analyzer 2.5
Not Vulnerable:

eIQnetworks Enterprise Security Analyzer Multiple Buffer Overflow Vulnerabilities

eIQnetworks Enterprise Security Analyzer is prone to multiple buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Exploiting these issues allows remote attackers to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Enterprise Security Analyzer 2.5 is reported vulnerable; other versions may also be affected.

eIQnetworks Enterprise Security Analyzer Multiple Buffer Overflow Vulnerabilities

The following proof-of-concept commands are available:

- DELETESEARCHFOLDER : [DELETESEARCHFOLDER&A x 40000...&]
- DELTASK: [DELTASK&A x 3000...&current&test&]
- HMGR_CHECKHOSTSCSV: [ HMGR_CHECKHOSTSCSV&A x 80000...&]
- TASKUPDATEDUSER: [TASKUPDATEDUSER&A x 60000...&test&test&]
- VERIFYUSERKEY: [VERIFYUSERKEY&A x 13000...&Administrator&127.0.0.1&12345]
- VERIFYPWD: [VERIFYPWD&A x 6000...&admin&adminpass&]

eIQnetworks Enterprise Security Analyzer Multiple Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

eIQnetworks Enterprise Security Analyzer Multiple Buffer Overflow Vulnerabilities

References:

• EIQ Web Site (EIQ)
  
• Enterprise Security Analyzer Product Page (eIQnetworks)
  
• INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows (INFIGO IS )