RSA Authentication Agent for Web fails to properly validate input

Overview The RSA Authentication Agent for Web running on Microsoft Internet Information Services IIS does not properly validate input that is passed to the "postdata" parameter in "/WebID/IISWebAgentIF.dll" and may allow an attacker to execute code in a user's browser. Description RSA...

CVE-2005-1118

CVE-2005-1118 describes a cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll of the RSA Authentication Agent for Web 5.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the postdata parameter. The CVE entry lists the affected product as RSA Authentication A...

CVE-2005-1118

Cross-site scripting XSS vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter...

CVE-2005-1118: Undefined Security Weakness

Cross-site scripting XSS vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter...

RSA Security RSA Authentication Agent For Web 5.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/13168/info A remote cross-site scripting vulnerability affects the RSA Security RSA Authentication Agent for Web. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web...

RSA Security RSA Authentication Agent For Web 5.2 - Cross-Site Scripting

RSA Security RSA Authentication Agent For Web 5.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13168/info A remote cross-site scripting vulnerability affects the RSA Security RSA Authentication Agent for Web. This issue is due to a failure of the application to properly saniti...

[SA14954] RSA Authentication Agent for Web for IIS Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: RSA Authentication Agent for Web for IIS Cross-Site...

CVE-2005-1118

Cross-site scripting XSS vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote attackers to inject arbitrary web script or HTML via the postdata parameter...

CVE-1999-0248

The CVE-1999-0248 entry concerns sshd 1.2.17, where a race condition in the authentication agent mechanism can allow an attacker to steal another user’s credentials. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE List, EUVD) without providing explicit exploit code or c...

CVE-1999-0787

The CVE describes a local-privilege issue in ssh-agent: an AF_UNIX socket used for key forwarding is created by ssh-agent, and the client’s connection may bypass proper permissions checks, enabling a local attacker to establish sessions as the victim user. The Red Hat entry reiterates the SSH-age...

CVE-1999-0787: Undefined Security Weakness

The SSH authentication agent follows symlinks via a UNIX domain socket...

CVE-1999-0248: Undefined Security Weakness

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...

CVE-1999-0248

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...