CVE-2005-4734 Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parame...
MediumCVSS 6.4
EPSS 55.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rsa authentication agent for web | = 5.2 | No fix listed |
| rsa authentication agent for web | = 5.3 | No fix listed |
References
- 17281 exploit third-party-advisory vendor-advisory
- www.metasploit.com exploit
- 20151 exploit vdb-entry
- 26424 vdb-entry
- knowledge.rsasecurity.com