Vulnerability Name: | CVE-2005-1471 (CCN-20444) | ||||||||
Assigned: | 2005-05-06 | ||||||||
Published: | 2005-05-06 | ||||||||
Updated: | 2016-10-18 | ||||||||
Summary: | Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: CCN Type: BugTraq Mailing List, Fri May 06 2005 - 03:58:03 CDT RSA SecurID Web Agent Heap Overflow Source: MITRE Type: CNA CVE-2005-1471 Source: FULLDISC Type: UNKNOWN 20050506 [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow Source: CCN Type: SA15222 RSA Authentication Agent for Web Buffer Overflow Vulnerability Source: SECUNIA Type: UNKNOWN 15222 Source: CCN Type: US-CERT VU#790533 RSA Authentication Agent for Web for IIS vulnerable to heap overflow via overly large chunk Source: CCN Type: OSVDB ID: 16164 RSA SecurID Web Agent Remote Overflow Source: CCN Type: RSA SecurID Web page RSA SecurID for Microsoft Windows Source: CCN Type: BID-13524 RSA Security RSA Authentication Agent For Web Remote Heap Buffer Overflow Vulnerability Source: XF Type: UNKNOWN rsa-securid-web-agent-bo(20444) Source: CCN Type: RSA SecurCare Online Web page RSA SecurCare Online Logon | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||
BACK |