CVE-2003-1003: Input Validation
Published Dec 17, 2003
·Updated
Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set.
Affected Software
38 affected components
Cisco PIX firewall=6.2.2_.111
Cisco Pix Firewall Software=5.1\(4.206\)
Cisco Pix Firewall Software=5.1\(4\)
Cisco Pix Firewall Software=5.2
Cisco Pix Firewall Software=5.3
Cisco Pix Firewall Software=5.3\(1\)
Cisco Pix Firewall Software=5.3\(1.200\)
Cisco Pix Firewall Software=6.0\(4.101\)
Cisco Pix Firewall Software=6.0\(1\)
Cisco Pix Firewall Software=5.1
Cisco Pix Firewall Software=6.0
Cisco Pix Firewall Software=6.0\(2\)
Cisco Pix Firewall Software=6.1\(5\)
Cisco Pix Firewall Software=6.3\(1\)
Cisco Pix Firewall Software=5.3\(3\)
Cisco Pix Firewall Software=6.2\(3\)
Cisco Pix Firewall Software=6.2\(3.100\)
Cisco Pix Firewall Software=5.2\(1\)
Cisco Pix Firewall Software=5.2\(2\)
Cisco Pix Firewall Software=6.1
Cisco Pix Firewall Software=6.1\(2\)
Cisco Pix Firewall Software=5.2\(6\)
Cisco Pix Firewall Software=5.2\(9\)
Cisco Pix Firewall Software=6.0\(3\)
Cisco Pix Firewall Software=6.1\(4\)
Cisco Pix Firewall Software=6.2
Cisco Pix Firewall Software=6.3
Cisco Pix Firewall Software=5.2\(7\)
Cisco Pix Firewall Software=6.0\(4\)
Cisco Pix Firewall Software=6.1\(3\)
Cisco Pix Firewall Software=5.0
Cisco Pix Firewall Software=5.3\(2\)
Cisco Pix Firewall Software=6.2\(1\)
Cisco Pix Firewall Software=6.2\(2\)
Cisco Pix Firewall Software=5.2\(3.210\)
Cisco Pix Firewall Software=5.2\(5\)
Cisco Pix Firewall Software=6.1\(1\)
Cisco Pix Firewall Software=6.3\(3.102\)
Remediation
Event History
Dec 17, 2003
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Jan 5, 2004
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-1003?
CVE-2003-1003 has a severity rating of high due to its capability to cause a complete denial of service on affected Cisco PIX firewalls.
2
How do I fix CVE-2003-1003?
To fix CVE-2003-1003, upgrade your Cisco PIX firewall to a version later than 6.3.1 or disable the SNMPv3 configuration.
3
Which Cisco PIX firewall versions are affected by CVE-2003-1003?
CVE-2003-1003 affects Cisco PIX firewalls running versions 5.x.x and 6.3.1 and earlier.
4
What type of attack does CVE-2003-1003 involve?
CVE-2003-1003 involves a denial of service attack triggered by specially crafted SNMPv3 messages.
5
Is CVE-2003-1003 a remote vulnerability?
Yes, CVE-2003-1003 is a remote vulnerability that allows attackers to exploit the system from a distance.