CVE-2005-4734

EPSS 54.5%

Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16358unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/17281 https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect http://www.osvdb.org/20151 http://www.securityfocus.com/bid/26424