CVE Feed

    Dashboard / CVE / CVE-2003-1001

    CVE-2003-1001

    Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

    Published:Dec 17, 2003
    Last Modified:Apr 16, 2026
    EPS:Dec 17, 2003
    EPSS Score:0.00795
    CVSS Score:5

    Affected Products

    Vendor
    Cisco
    Product
    Catalyst 6500
    Vendor
    Cisco
    Product
    Catalyst 6500 Ws-svc-nam-1
    Vendor
    Cisco
    Product
    Catalyst 6500 Ws-svc-nam-2
    Vendor
    Cisco
    Product
    Catalyst 6500 Ws-x6380-nam
    Vendor
    Cisco
    Product
    Catalyst 7600 Ws-svc-nam-1
    Vendor
    Cisco
    Product
    Catalyst 7600 Ws-svc-nam-2
    Vendor
    Cisco
    Product
    Catalyst 7600 Ws-x6380-nam
    Vendor
    Cisco
    Product
    Catos
    Vendor
    Cisco
    Product
    Firewall Services Module

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-12238 (CVSS 6.5) — A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Cataly…
    CVE-2016-6366 (CVSS 8.8) — Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, A…
    CVE-2012-5037 (CVSS 4.6) — The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to c…
    CVE-2014-2124 (CVSS 7.1) — Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, al…
    CVE-2013-1100 (CVSS 5.4) — The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows rem…
    CVE-2012-4661 (CVSS 9) — Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 s…
    CVE-2012-4660 (CVSS 7.8) — The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Service…
    CVE-2012-4663 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4662 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4659 (CVSS 7.1) — The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 ser…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High