CVE-2007-2059

Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELETESEARCHFOLDER, (2) DELTASK, (3) HMGR_CHECKHOSTSCSV, (4) TASKUPDATEDUSER, (5) VERIFYUSERKEY, or (6) VERIFYPWD command.

• http://secunia.com/advisories/24881Patch, Vendor Advisory
• http://www.infigo.hr/en/in_focus/advisories/INFIGO-2007-04-05Vendor Advisory
• http://www.securityfocus.com/archive/1/465488/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1380
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33646
• http://secunia.com/advisories/24881Patch, Vendor Advisory
• http://www.infigo.hr/en/in_focus/advisories/INFIGO-2007-04-05Vendor Advisory
• http://www.securityfocus.com/archive/1/465488/100/0/threaded
• http://www.vupen.com/english/advisories/2007/1380
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33646

Published

Apr 18, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2053Multiple stack-based buffer overflows in AFFLIB before 2.2.6…
• CVE-2007-2054Multiple format string vulnerabilities in AFFLIB before 2.2.…
• CVE-2007-2055AFFLIB 2.2.8 and earlier allows attackers to execute arbitra…
• CVE-2007-2056Rejected reason: The getlock function in aimage/aimage.cpp i…
• CVE-2007-2057Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 a…
• CVE-2007-2058Directory traversal vulnerability in Acubix PicoZip 4.02 all…
• CVE-2007-2060Cross-zone scripting vulnerability in the Wizz RSS Reader be…
• CVE-2007-2061Cross-site scripting (XSS) vulnerability in check_login.asp …
• CVE-2007-2062Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA al…
• CVE-2007-2063SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure wo…
• CVE-2007-2064Multiple PHP remote file inclusion vulnerabilities in Robert…
• CVE-2007-2065PHP remote file inclusion vulnerability in db/PollDB.php in …