CVE-2005-4734

Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.3 for IIS allows remote attackers to execute arbitrary code via a long url parameter in the Redirect method.

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

54.48% chance of exploitation in the next 30 days, 99th percentile

Published

2006-03-19

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/rsa_webagent_redir…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16358

References

• CVE Record
• NVD entry

Related

• CVE-2005-4724
• CVE-2005-4769
• CVE-2005-4723
• CVE-2005-4770
• CVE-2005-4720
• CVE-2005-4774