RSA issues patch for Web authentication tool
Published: 12 May 2005 13:25 BST
Security company RSA has patched a vulnerability in its Web authentication software.
RSA is advising customers to update software for its Authentication Agent for Web for Internet Information Service, after researcher Gary O'Leary-Steele discovered a flaw which could allow hackers to execute arbitrary code.
On its Web site Secunia said that the vulnerability occurred from a boundary error. "[It] can be exploited to cause a heap-based buffer overflow by sending an overly long 'chunk' of data via the chunked-encoding mechanism."
The vulnerability exists in versions 5, 5.2 and 5.3 of the product. Click here to download the patch.
Did you find this article useful?
55 out of 133 people found this useful
Digg
Slashdot
Del.ici.ous
Stumble
Reddit
