Lucene search
MitreCVE-2005-4734HistoryMar 19, 2006 - 11:00 p.m.
CVE-2005-4734
2006-03-1923:00:00
mitre
web.nvd.nist.gov
34
cve-2005-4734
buffer overflow
iis
rsa
authentication agent
securid web agent
remote code execution
nvd
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.371
Percentile
97.2%
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.
Affected configurations
Node
rsaauthentication_agent_for_webMatch5.2
ORrsaauthentication_agent_for_webMatch5.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| rsa | authentication_agent_for_web | 5.2 | cpe:2.3:a:rsa:authentication_agent_for_web:5.2:*:*:*:*:*:*:* |
| rsa | authentication_agent_for_web | 5.3 | cpe:2.3:a:rsa:authentication_agent_for_web:5.3:*:*:*:*:*:*:* |
Related
saint
saint
RSA SecurID Web Agent for IIS redirect buffer overflow
2005-11-30 00:00:00
RSA SecurID Web Agent for IIS redirect buffer overflow
2005-11-30 00:00:00
RSA SecurID Web Agent for IIS redirect buffer overflow
2005-11-30 00:00:00
cvelist
cvelist
CVE-2005-4734
2006-03-19 23:00:00
exploitdb
exploitdb
Microsoft IIS - ISAPI RSA WebAgent Redirect Overflow (Metasploit)
2010-09-20 00:00:00
nvd
nvd
CVE-2005-4734
2005-12-31 05:00:00
metasploit
metasploit
Microsoft IIS ISAPI RSA WebAgent Redirect Overflow
2005-12-26 14:34:22
packetstorm
packetstorm
Microsoft IIS ISAPI RSA WebAgent Redirect Overflow
2009-11-26 00:00:00
checkpoint_advisories
checkpoint_advisories
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.371
Percentile
97.2%
Related for CVE-2005-4734