RSA SecurID Web Agent buffer overflow
| rsa-securid-web-agent-bo (20444) |  High Risk |
Description:
RSA SecurID is vulnerable to a heap-based buffer overflow. By sending a large amount of data, a remote attacker could overwrite the heap and execute arbitrary code on the system with LocalSystem privileges or cause a denial of service.
Platforms Affected:
- Microsoft, IIS 5.0
- Microsoft, IIS 5.1
- Microsoft, Windows 2000 SP4
- RSA, SecurID Web Agent 5
- RSA, SecurID Web Agent 5.2
- RSA, SecurID Web Agent 5.3
Remedy:
Apply the patch for this vulnerability, available from the RSA SecurCare Online Web page. See References.
Consequences:
Gain Access
References:
- BugTraq Mailing List, Fri May 06 2005 - 03:58:03 CDT , RSA SecurID Web Agent Heap Overflow at http://archives.neohapsis.com/archives/bugtraq/2005-05/0077.html.
- RSA SecurCare Online Web page, RSA SecurCare Online Logon at https://knowledge.rsasecurity.com/cleartrust/ct_logon.asp?CTAuthMode=BASIC&ct_orig_uri=%2F.
- RSA SecurID Web page, RSA SecurID for Microsoft Windows at http://www.rsasecurity.com/node.asp?id=1173.
- BID-13524: RSA Security RSA Authentication Agent For Web Remote Heap Buffer Overflow Vulnerability
- CVE-2005-1471: Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
- SA15222: RSA Authentication Agent for Web Buffer Overflow Vulnerability
- US-CERT VU#790533: RSA Authentication Agent for Web for IIS vulnerable to heap overflow via overly large chunk
Reported:
May 06, 2005
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net