CVE-2018-1232

HIGH

RSA Authentication Agent for Web < 8.0.1 - Stack-based Buffer Overflow via Malicious Web Cookie

Title source: llm
STIX 2.1

Description

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the authentication agent and cause a denial-of-service situation.

References (2)

Core 2
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2018/Mar/60
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040577

Scores

CVSS v3 7.5
EPSS 0.0282
EPSS Percentile 85.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
rsa/authentication_agent_for_web < 8.0.1 (2 CPE variants)
Published Mar 30, 2018
Tracked Since Feb 18, 2026