Signature Detail

HTTP: Microsoft IIS ISAPI RSA WebAgent Redirect Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft IIS ISAPI RSA WebAgent. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Simple HTTP Scanner is reportedly prone to multiple unspecified security vulnerabilities. The cause and impact of this issue are currently unknown. This BID will be updated when more information becomes available. Versions prior to 0.4 are vulnerable to these issues.

Affected Products

• Simple HTTP Scanner 0.1
• Simple HTTP Scanner 0.2
• Simple HTTP Scanner 0.3

References

• BugTraq: 20151
• CVE: CVE-2005-4734
• URL: https://knowledge.rsasecurity.com/dlcpages/rsa_securid/securid_dlc_aaweb.asp