CVE-2007-2059: Eiqnetworks Enterprise Security Analyzer

High severity, CVSS 10.0. EPSS: 7.3% chance of exploitation in the next 30 days.

Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELETESEARCHFOLDER, (2) DELTASK, (3) HMGR_CHECKHOSTSCSV, (4) TASKUPDATEDUSER, (5) VERIFYUSERKEY, or (6) VERIFYPWD command.

Affected products

• Eiqnetworks Enterprise Security Analyzer: version 2.5 only

Published 2007-04-18. Last modified 2026-06-16.