Signature Detail

HTTP: Aladdin eToken PKI Client ETV File Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Aladdin eToken. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

Aladdin eToken PKI Client is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Aladdin eToken PKI Client 4.5 is vulnerable; other versions may also be affected.

Affected Products

• Aladdin Enterprises eToken PKI Client 4.5

References

• BugTraq: 39370