CVE-2001-1462: High severity RSA SecurID vulnerability

Published Oct 24, 2001

Updated

WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information.

Affected Software

1 affected component

RSA SecurID=5.0

Event History

Oct 24, 2001

CVE Published

04:00 AM

Apr 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1462?

CVE-2001-1462 has a high severity rating due to its potential for exposing sensitive information.

How do I fix CVE-2001-1462?

To fix CVE-2001-1462, update RSA SecurID to a version that resolves this vulnerability.

What systems are affected by CVE-2001-1462?

CVE-2001-1462 affects RSA SecurID 5.0 as used by ACE/Agent for Windows, Windows NT, and Windows 2000.

What can attackers do with CVE-2001-1462?

Attackers can exploit CVE-2001-1462 to enter debug mode in the WebID agent and potentially access sensitive information.

Is CVE-2001-1462 remotely exploitable?

Yes, CVE-2001-1462 can be remotely exploited through a specially crafted URL containing null characters.