CVE-2003-1001: Buffer Overflow

Published Dec 17, 2003

Updated

Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

Affected Software

18 affected components

Cisco Catalyst 6500

Cisco Catalyst 6500 Ws-svc-nam-1=2.2\(1a\)

Cisco Catalyst 6500 Ws-svc-nam-1=3.1\(1a\)

Cisco Catalyst 6500 Ws-svc-nam-2=2.2\(1a\)

Cisco Catalyst 6500 Ws-svc-nam-2=3.1\(1a\)

Cisco Catalyst 6500 Ws-x6380-nam=2.1\(2\)

Cisco Catalyst 6500 Ws-x6380-nam=3.1\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-1=2.2\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-1=3.1\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-2=2.2\(1a\)

Cisco Catalyst 7600 Ws-svc-nam-2=3.1\(1a\)

Cisco Catalyst 7600 Ws-x6380-nam=2.1\(2\)

Cisco Catalyst 7600 Ws-x6380-nam=3.1\(1a\)

Cisco Firewall Services Module

Cisco Firewall Services Module=1.1.2

Cisco CatOS=5.4\(1\)

Cisco CatOS=7.5\(1\)

Cisco CatOS=7.6\(1\)

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml

Event History

Dec 17, 2003

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Jan 5, 2004

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-1001?

CVE-2003-1001 is considered critical due to the potential for remote attackers to cause denial of service by exploiting the vulnerability.

How do I fix CVE-2003-1001?

To mitigate CVE-2003-1001, it is recommended to apply the latest patches provided by Cisco for the affected devices.

What devices are affected by CVE-2003-1001?

CVE-2003-1001 affects various Cisco devices including the Catalyst 6500 and 7600 series with specific software versions.

Can CVE-2003-1001 be exploited remotely?

Yes, CVE-2003-1001 can be exploited remotely through HTTP authentication requests.

What types of authentication protocols are involved in CVE-2003-1001?

CVE-2003-1001 is related to vulnerabilities in TACACS+ and RADIUS authentication protocols.