TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
742
Signature Description: EIQnetworks SecureVue enterprise Security management(ESM) solution delivers next-
generation security information and compliance management from an integrated platform. EIQ Networks Network
Security Analyzer is a denial of service vulnerability, caused by a null pointer dereference in the DataCollection
service. This Signature will trigger when an attacker send specially-crafted data containing via a 'LOGPATH' string to
TCP port 10618. The successful exploitation may allow an attacker to cause the DataCollection service to crash. No
remedy available as of October, 2008.
Signature ID: 32649
EIQnetworks Network Security Analyzer DataCollector (START) DoS
Threat Level: Critical
Industry ID: CVE-2007-0228
Bugtraq: 21994
Signature Description: EIQnetworks SecureVue enterprise Security management(ESM) solution delivers next-
generation security information and compliance management from an integrated platform. EIQ Networks Network
Security Analyzer is a denial of service vulnerability, caused by a null pointer dereference in the DataCollection
service. This Signature will trigger when an attacker send specially-crafted data containing via a 'START' string to TCP
port 10618. The successful exploitation may allow an attacker to cause the DataCollection service to crash. No remedy
available as of October, 2008.
Signature ID: 32650
EIQnetworks Network Security Analyzer DataCollector (SETPRGFILE) DoS
Threat Level: Critical
Industry ID: CVE-2007-0228 Bugtraq: 21994
Signature Description: EIQnetworks SecureVue enterprise Security management(ESM) solution delivers next-
generation security information and compliance management from an integrated platform. EIQ Networks Network
Security Analyzer is a denial of service vulnerability, caused by a null pointer dereference in the DataCollection
service. This Signature will trigger when an attacker send specially-crafted data containing via a 'SETPRGFILE' string
to TCP port 10618. The successful exploitation may allow an attacker to cause the DataCollection service to crash. No
remedy available as of October, 2008.
Signature ID: 32651
EIQnetworks Network Security Analyzer DataCollector (SETREPLYPORT) DoS
Threat Level: Critical
Industry ID: CVE-2007-0228 Bugtraq: 21994
Signature Description: EIQnetworks SecureVue enterprise Security management(ESM) solution delivers next-
generation security information and compliance management from an integrated platform. EIQ Networks Network
Security Analyzer is a denial of service vulnerability, caused by a null pointer dereference in the DataCollection
service. This Signature will trigger when an attacker send specially-crafted data containing via a 'SETREPLYPORT'
string to TCP port 10618. The successful exploitation may allow an attacker to cause the DataCollection service to
crash. No remedy available as of October, 2008.
Signature ID: 32652
EIQnetworks Network Security Analyzer DataCollector (SETSYNCHRONOUS) DoS
Threat Level: Critical
Industry ID: CVE-2007-0228 Bugtraq: 21994
Signature Description: EIQnetworks SecureVue enterprise Security management(ESM) solution delivers next-
generation security information and compliance management from an integrated platform. EIQ Networks Network
Security Analyzer is a denial of service vulnerability, caused by a null pointer dereference in the DataCollection
service. This Signature will trigger when an attacker send specially-crafted data containing via a