Vulnerabilities > CVE-2004-0425 - Heap Overflow vulnerability in Netegrity Sideminder Affiliate Agent 4.0

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
netegrity
critical

Summary

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.

Vulnerable Configurations

Part Description Count
Application
Netegrity
1