RSA SecurID Software Token Converter XML-Formatted .sdtid Buffer Overflow

High Nessus Plugin ID 69515


The remote Windows host has an application that may be affected by a buffer overflow condition.


RSA SecurID Software Token Converter prior to version 2.6.1 is prone to an overflow condition. A boundary error occurs when handling XML- formatted '.sdtid' file strings. By tricking a user into running the converter with a crafted file, an attacker could potentially execute arbitrary code.


Update to version 2.6.1 or higher.

See Also

Plugin Details

Severity: High

ID: 69515

File Name: rsa_converter_overflow_windows.nasl

Version: $Revision: 1.7 $

Type: local

Agent: windows

Family: Windows

Published: 2013/08/30

Modified: 2016/12/09

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 7.6

Temporal Score: 5.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:rsa:securid_software_token_converter

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2012/03/06

Vulnerability Publication Date: 2012/03/06

Reference Information

CVE: CVE-2012-0397

BID: 52315

OSVDB: 79894

IAVB: 2012-B-0027