medium6.4Public exploit code
CVE-2005-4734
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft IIS - ISAPI RSA WebAgent Redirect Overflow (Metasploit)2010-09-20 · remote · windows · Verified
Impact
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rsa | Authentication Agent For Web | Versions 5.2, 5.3 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17281
- http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect
- http://www.osvdb.org/20151
- http://www.securityfocus.com/bid/26424
- https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp
- http://secunia.com/advisories/17281
- http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect
- http://www.osvdb.org/20151
- http://www.securityfocus.com/bid/26424
- https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp