CVE-2003-1001

Published: Jan 5, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

Affected (18)

Products: Cisco: Catalyst 6500, Catalyst 6500 Ws Svc Nam 1, Catalyst 6500 Ws Svc Nam 2, Catalyst 6500 Ws X6380 Nam, Catalyst 7600 Ws Svc Nam 1, Catalyst 7600 Ws Svc Nam 2, Catalyst 7600 Ws X6380 Nam, Catos, Firewall Services Module

Cisco

9 products

Catalyst 6500

Catalyst 6500 Ws Svc Nam 1

Catalyst 6500 Ws Svc Nam 2

Catalyst 6500 Ws X6380 Nam

Catalyst 7600 Ws Svc Nam 1

Catalyst 7600 Ws Svc Nam 2

Catalyst 7600 Ws X6380 Nam

Catos

Firewall Services Module

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Catalyst 6500	All versions
Cisco Catalyst 6500 Ws Svc Nam 1	Version 2.2(1a)
Cisco Catalyst 6500 Ws Svc Nam 1	Version 3.1(1a)
Cisco Catalyst 6500 Ws Svc Nam 2	Version 2.2(1a)
Cisco Catalyst 6500 Ws Svc Nam 2	Version 3.1(1a)
Cisco Catalyst 6500 Ws X6380 Nam	Version 2.1(2)
Cisco Catalyst 6500 Ws X6380 Nam	Version 3.1(1a)
Cisco Catalyst 7600 Ws Svc Nam 1	Version 2.2(1a)
Cisco Catalyst 7600 Ws Svc Nam 1	Version 3.1(1a)
Cisco Catalyst 7600 Ws Svc Nam 2	Version 2.2(1a)
Cisco Catalyst 7600 Ws Svc Nam 2	Version 3.1(1a)
Cisco Catalyst 7600 Ws X6380 Nam	Version 2.1(2)
Cisco Catalyst 7600 Ws X6380 Nam	Version 3.1(1a)
Cisco Catos	Version 5.4(1)
Cisco Catos	Version 7.5(1)
Cisco Catos	Version 7.6(1)
Cisco Firewall Services Module	All versions
Cisco Firewall Services Module	Version 1.1.2

References (2)

http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml

Source: cve@mitre.org

PatchVendor Advisory

http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.