Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-1232

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain ma

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the authentication agent and cause a denial-of-service situation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC RSA Authentication Agent for Web for IIS, RSA Authentication Agent for Web for Apache Web Server

  • version 8.0.1 and earlieraffected

References