CVE-2002-2140: Buffer Overflow
Published Dec 31, 2002
·Updated
Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.
Affected Software
19 affected components
Cisco Pix Firewall Software=5.2
Cisco Pix Firewall Software=5.2\(8\)
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=5.2\(1\)
Cisco Pix Firewall Software=5.2\(2\)
Cisco Pix Firewall Software=5.2\(3\)
Cisco Pix Firewall Software=5.2\(4\)
Cisco Pix Firewall Software=5.2\(6\)
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=5.2\(5\)
Cisco Pix Firewall Software=5.2\(7\)
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=6.2\(1\)
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Nov 16, 2005
CVE Published
via MITRE·09:17 PM
Data Sourced
via MITRE·09:17 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2140?
CVE-2002-2140 is classified as a high severity vulnerability that can lead to remote denial of service.
2
How do I fix CVE-2002-2140?
To fix CVE-2002-2140, upgrade your Cisco PIX Firewall software to a version that is not affected by this vulnerability.
3
What versions of Cisco PIX Firewall are affected by CVE-2002-2140?
CVE-2002-2140 affects Cisco PIX Firewall versions 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1.
4
Can CVE-2002-2140 be exploited remotely?
Yes, CVE-2002-2140 can be exploited by remote attackers through crafted HTTP traffic authentication.
5
What types of authentication are affected by CVE-2002-2140?
CVE-2002-2140 specifically affects TACACS+ and RADIUS authentication protocols.