Re: SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS

[H D Moore <fdlist () digitaloffense net>]

I believe 5.2 and 5.3 are vulnerable as well, there are other fun bugs 
hiding in there too :) Filemon rocks.

-HD

On Tuesday 25 October 2005 15:26, Bernhard Mueller wrote:
> This flaw was discovered in version 5.1 of RSA Agent for Web. No other
> versions were available for testing. Web Agents >5.1 may also be
> vulnerable.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/