RSA.Authentication.Agent.for.Web.Buffer.Overflow

description-logoDescription

This indicates a possible exploit of a heap-based buffer-overflow vulnerability in RSA SecurID Web Agent.
The vulnerability is caused by a boundary check error. A remote attacker may exploit this via malformed chunked-encoding data, allowing execution of arbitrary code.

affected-products-logoAffected Products

RSA Security RSA Authentication Agent for Web 5.3
RSA Security RSA Authentication Agent for Web 5.2
RSA Security RSA Authentication Agent for Web 5.0

Impact logoImpact

System Compromise

recomended-action-logoRecommended Actions

Apply the patch for this vulnerability, available from the RSA SecurCare Online web page.
https://knowledge.rsasecurity.com/cleartrust/ct_logon.asp?CTAuthMode=BASIC&ct_orig_uri=%2F

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)