PT-2005-5399 · Rsa · Rsa Authentication Agent For Web

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4734

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions RSA Authentication Agent for Web versions 5.2 through 5.3

Description The issue is a stack-based buffer overflow in the IISWebAgentIF.dll component. It allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.

Recommendations For versions 5.2 through 5.3, update to a version that contains a fix for this issue to prevent remote code execution.

Exploit

Fix

Related Identifiers

CVE-2005-4734

Affected Products

Rsa Authentication Agent For Web

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/rsa_webagent_redirect.rb · Exploit
• 🔥 http://osvdb.org/20151 · Exploit
• 🔥 http://secunia.com/advisories/17281 · Exploit
• 🔥 http://metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect · Exploit
• 🔥 https://exploit-db.com/exploits/16358 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4734 · Security Note
• http://securityfocus.com/bid/26424 · Note
• https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp · Note