Signature Detail
Short Name |
APP:EIQ-LM-OF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
eIQnetworks License Manager Overflow |
Release Date |
2006/09/21 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: eIQnetworks License Manager Overflow
This signature detects attempts to exploit a known vulnerability in eIQnetworks License Manager. Versions prior to 2.5.0 are vulnerable. A successful attack can lead to a buffer overflow and arbitrary remote code execution. Affected Products: eIQnetworks Enterprise Security Analyzer; Astaro Report Manager (OEM); Fortinet FortiReporter (OEM); iPolicy Security Reporter (OEM); SanMina Viking Multi-Log Manager (OEM); Secure Computing G2 Security Reporter (OEM); Top Layer Network Security Analyzer (OEM).
Extended Description
eIQnetworks Enterprise Security Analyzer License Manager is prone to a remote buffer-overflow vulnerability. This issue can facilitate a remote compromise due to arbitrary code execution. Enterprise Security Analyzer versions prior to 2.5.0 are vulnerable.
Affected Products
- eIQnetworks Enterprise Security Analyzer 2.0
- eIQnetworks Enterprise Security Analyzer 2.1
References
- BugTraq: 19163
- CVE: CVE-2006-3838
- URL: http://www.frsirt.com/english/advisories/2006/3006