PT-2005-4139 · Rsa · Rsa Authentication Agent For Web

Bernhard Mueller · Published 2005-10-27 · Updated 2016-10-18 · CVE-2005-3329

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent for Web versions 5.3 and earlier

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the image parameter in a "GetPic" operation.

Recommendations For RSA Authentication Agent for Web versions 5.3 and earlier, update to a version later than 5.3 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-3329

Affected Products

Rsa Authentication Agent For Web

References · 10

• 🔥 http://securitytracker.com/id?1015105 · Exploit
• 🔥 https://exploit-db.com/exploits/26398 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3329 · Security Note
• http://securityfocus.com/bid/15206 · Note
• http://vupen.com/english/advisories/2005/2203 · Note
• http://marc.info/?l=bugtraq&m=113028928630700&w=2 · Note
• http://marc.info/?l=full-disclosure&m=113027324906876&w=2 · Note
• http://marc.info/?l=full-disclosure&m=113027017101376&w=2 · Note
• http://secunia.com/advisories/17331 · Note
• http://securityreason.com/securityalert/116 · Note