RSA SecurID Web Agent buffer overflow
| rsa-securid-web-agent-bo (20444) |  High Risk |
Description:
RSA SecurID is vulnerable to a heap-based buffer overflow. By sending a large amount of data, a remote attacker could overwrite the heap and execute arbitrary code on the system with LocalSystem privileges or cause a denial of service.
Consequences:
Gain Access
Remedy:
Apply the patch for this vulnerability, available from the RSA SecurCare Online Web page. See References.
References:
- BugTraq Mailing List, Fri May 06 2005 - 03:58:03 CDT : RSA SecurID Web Agent Heap Overflow.
- RSA SecurCare Online Web page: RSA SecurCare Online Logon.
- RSA SecurID Web page: RSA SecurID for Microsoft Windows.
- BID-13524: RSA Security RSA Authentication Agent For Web Remote Heap Buffer Overflow Vulnerability
- CVE-2005-1471: Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
- SA15222: RSA Authentication Agent for Web Buffer Overflow Vulnerability
- US-CERT VU#790533: RSA Authentication Agent for Web for IIS vulnerable to heap overflow via overly large chunk
Platforms Affected:
- Microsoft Internet Information Server 5.0
- Microsoft Internet Information Server 5.1
- Microsoft Windows 2000 SP4
- RSA SecurID Web Agent 5
- RSA SecurID Web Agent 5.2
- RSA SecurID Web Agent 5.3
Reported:
May 06, 2005
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net