Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-3838 Details

Description

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and possibly other products, allow remote attackers to execute arbitrary code via long (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, and (12) EDITPOLICY commands to the Syslog daemon (syslogserver.exe); (13) GUIADDDEVICE, (14) ADDDEVICE, and (15) DELETEDEVICE commands to the Topology server (Topology.exe); the (15) LICMGR_ADDLICENSE command to the License Manager (EnterpriseSecurityAnalyzer.exe); the (16) TRACE and (17) QUERYMONITOR commands to the Monitoring agent (Monitoring.exe); and possibly other vectors related to the Syslog daemon (syslogserver.exe).

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html	CVE
http://secunia.com/advisories/21211	CVE	Vendor Advisory
http://secunia.com/advisories/21213	CVE	Vendor Advisory
http://secunia.com/advisories/21214	CVE	Vendor Advisory
http://secunia.com/advisories/21215	CVE	Vendor Advisory
http://secunia.com/advisories/21217	CVE	Vendor Advisory
http://secunia.com/advisories/21218	CVE	Vendor Advisory
http://securitytracker.com/id?1016580	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27950	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27951	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27952	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27953	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27954	CVE
http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf	CVE
http://www.kb.cert.org/vuls/id/513068	CVE	US Government Resource
http://www.osvdb.org/27525	CVE
http://www.osvdb.org/27526	CVE
http://www.osvdb.org/27527	CVE
http://www.osvdb.org/27528	CVE
http://www.securityfocus.com/archive/1/441195/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/441197/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/441198/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/441200/100/0/threaded	CVE
http://www.securityfocus.com/bid/19163	CVE
http://www.securityfocus.com/bid/19164	CVE
http://www.securityfocus.com/bid/19165	CVE
http://www.securityfocus.com/bid/19167	CVE
http://www.tippingpoint.com/security/advisories/TSRT-06-03.html	CVE	Vendor Advisory
http://www.tippingpoint.com/security/advisories/TSRT-06-04.html	CVE
http://www.tippingpoint.com/security/advisories/TSRT-06-07.html	CVE
http://www.vupen.com/english/advisories/2006/2985	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3006	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3007	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3008	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3009	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3010	CVE	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-023.html	CVE
http://www.zerodayinitiative.com/advisories/ZDI-06-024.html	CVE
http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html	[email protected]
http://secunia.com/advisories/21211	[email protected]	Vendor Advisory
http://secunia.com/advisories/21213	[email protected]	Vendor Advisory
http://secunia.com/advisories/21214	[email protected]	Vendor Advisory
http://secunia.com/advisories/21215	[email protected]	Vendor Advisory
http://secunia.com/advisories/21217	[email protected]	Vendor Advisory
http://secunia.com/advisories/21218	[email protected]	Vendor Advisory
http://securitytracker.com/id?1016580	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27950	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27951	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27952	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27953	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27954	[email protected]
http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf	[email protected]
http://www.kb.cert.org/vuls/id/513068	[email protected]	US Government Resource
http://www.osvdb.org/27525	[email protected]
http://www.osvdb.org/27526	[email protected]
http://www.osvdb.org/27527	[email protected]
http://www.osvdb.org/27528	[email protected]
http://www.securityfocus.com/archive/1/441195/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/441197/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/441198/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/441200/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/19163	[email protected]
http://www.securityfocus.com/bid/19164	[email protected]
http://www.securityfocus.com/bid/19165	[email protected]
http://www.securityfocus.com/bid/19167	[email protected]
http://www.tippingpoint.com/security/advisories/TSRT-06-03.html	[email protected]	Vendor Advisory
http://www.tippingpoint.com/security/advisories/TSRT-06-04.html	[email protected]
http://www.tippingpoint.com/security/advisories/TSRT-06-07.html	[email protected]
http://www.vupen.com/english/advisories/2006/2985	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3006	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3007	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3008	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3009	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2006/3010	[email protected]	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-023.html	[email protected]
http://www.zerodayinitiative.com/advisories/ZDI-06-024.html	[email protected]

see all 76 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
eiqnetworks enterprise security analyzer	<= 2.4.0
CPE cpe:2.3:a:eiqnetworks:enterprise_security_analyzer:::::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 17, 2018	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Jul 27, 2006	Initial Analysis	[email protected]