Unscored severity · published May 6, 2005
CVE-2005-1471
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data
–
CVSS
2.6%
EPSS
No
On KEV
Description
Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Securid Web Agent · Rsa
5; 5.2; 5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1471
marc.info
http://marc.info/?l=full-disclosure&m=111537013104724&w=2
secunia.com
http://secunia.com/advisories/15222
More from Securid Web Agent
6.7
CVE-2015-6851
EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running…
–
CVE-2013-0941
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before…