What’s Vulnerable › Vulnerabilities

CVE-2003-1001

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-01-05 · updated 2026-06-16

Description

Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

Affected products

• Cisco Catalyst 6500: all versions
• Cisco Catalyst 6500 Ws-Svc-Nam-1: 2.2(1a), 3.1(1a)
• Cisco Catalyst 6500 Ws-Svc-Nam-2: 2.2(1a), 3.1(1a)
• Cisco Catalyst 6500 Ws-X6380-Nam: 2.1(2), 3.1(1a)
• Cisco Catalyst 7600 Ws-Svc-Nam-1: 2.2(1a), 3.1(1a)
• Cisco Catalyst 7600 Ws-Svc-Nam-2: 2.2(1a), 3.1(1a)
• Cisco Catalyst 7600 Ws-X6380-Nam: 2.1(2), 3.1(1a)
• Cisco Catos: 5.4(1), 7.5(1), 7.6(1)
• Cisco Firewall Services Module: 1.1.2

References

• http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml
• http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml

Get alerted when CVE-2003-1001 or the next vulnerability affects your stack