CVE-2003-0210: Buffer Overflow
Published Apr 26, 2003
·Updated
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Affected Software
12 affected components
Cisco Secure Access Control Server=2.5
Cisco Secure Access Control Server=3.0.1
Cisco Secure Access Control Server=2.6.2
Cisco Secure Access Control Server=2.1
Cisco Secure Access Control Server=2.6.3
Cisco Secure Access Control Server=3.0
Cisco Secure Access Control Server=2.4
Cisco Secure Access Control Server=2.6.4
Cisco Secure Access Control Server=3.1.1
Cisco Secure Access Control Server=2.6
Cisco Secure Access Control Server=2.3
Cisco Secure Access Control Server=3.0.3
Remediation
Event History
Apr 26, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
May 12, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0210?
CVE-2003-0210 has a high severity due to the potential for remote attackers to exploit a buffer overflow.
2
How do I fix CVE-2003-0210?
To fix CVE-2003-0210, upgrade Cisco Secure ACS to a version that is not vulnerable, specifically version 3.1.2 or later.
3
Which versions are affected by CVE-2003-0210?
CVE-2003-0210 affects Cisco Secure ACS versions 2.1 through 3.1.1.
4
What type of attack does CVE-2003-0210 facilitate?
CVE-2003-0210 can facilitate a denial of service attack and potentially allow the execution of arbitrary code.
5
What are the potential consequences of CVE-2003-0210 being exploited?
Exploiting CVE-2003-0210 may lead to service interruptions and unauthorized access to sensitive systems.