CVE-2018-1232

Published: Mar 30, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the authentication agent and cause a denial-of-service situation.

Affected (2)

Products: Rsa: Authentication Agent For Web

1 product

Authentication Agent For Web

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Rsa Authentication Agent For Web	Up to 8.0.1
Rsa Authentication Agent For Web	Up to 8.0.1

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

http://seclists.org/fulldisclosure/2018/Mar/60

Source: security_alert@emc.com

Mailing ListThird Party Advisory

http://www.securitytracker.com/id/1040577

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2018/Mar/60

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securitytracker.com/id/1040577

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.