CVE-2004-0425 Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
HighCVSS 10.0
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netegrity sideminder affiliate agent | = 4.0 | No fix listed |
References
- A042204-1 vendor-advisory
- 10198 vdb-entry vendor-advisory
- siteminder-affiliate-smprofile-bo(15950) vdb-entry