Secunia

Jeremy Jethro has reported a vulnerability in Netegrity SiteMinder Affiliate Agent, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the processing of cookies. This can be exploited to cause a heap overflow by passing an overly long string to the "SMPROFILE" cookie.

Successful exploitation allows execution of arbitrary code on a vulnerable system.

The vulnerability has been reported in SiteMinder Affiliate Agent 4.x.

Solution
The vendor has issued the following package:
Further details available in Customer Area

Provided and/or discovered by
Jeremy Jethro, @stake.

Original Advisory
http://www.atstake.com/research/advisories/2004/a042204-1.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area