CVE-2004-0425

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie...

CVE-2004-0425

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie...

CVE-2004-0425

CVE-2004-0425 describes a heap-based buffer overflow in the SiteMinder Affiliate Agent 4.x (platforms: Solaris, Windows, HP-UX) triggered by a large SMPROFILE cookie, enabling remote code execution. A vendor patch (Web Agent 4QMR6 HF-016) is available to fix cookie handling; the vulnerability is ...