Secunia

H.D. Moore has reported a vulnerability in RSA Authentication Agent for Web for Internet Information Services, which can be exploited by malicious people to cause a DoS or potentially to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in IISWebAgentIF.dll. This can be exploited to cause a stack-based buffer overflow via a GET request with an overly long "url" parameter in the "Redirect" method.

The vulnerability has been reported in version 5.2 and 5.3. Other versions may also be affected.

NOTE: An exploit for this vulnerability is publicly available.

Solution
The vendor reportedly has a patch available.

Provided and/or discovered by
H.D. Moore

Original Advisory
Metasploit Project:
http://www.metasploit.com/projects/Framework/exploits.html#rsa_iiswebagent_redirect

Deep Links
Links available in Customer Area