CVE-2003-1001
CVE-2003-1001 is a medium-severity vulnerability in Cisco Catalyst 6500 with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 1% (69th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Catalyst 6500
- Published:
- Last modified:
Description
Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
Frequently asked questions
- What is CVE-2003-1001?
- Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.
- How severe is CVE-2003-1001?
- CVE-2003-1001 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2003-1001 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2003-1001?
- CVE-2003-1001 primarily affects Cisco Catalyst 6500. In total, 18 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2003-1001?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2003-1001 published?
- CVE-2003-1001 was published on 2004-01-05 and last updated on 2026-06-16.
References
Affected products (18)
- cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:2.2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:3.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:2.2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:3.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:2.1\(2\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:3.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:2.2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:3.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:2.2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:3.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:2.1\(2\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:3.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:5.4\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:7.5\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:7.6\(1\):*:*:*:*:*:*:*
More vulnerabilities in Cisco Catalyst 6500
- CVE-2012-4661 — Critical (CVSS 9.0): Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series…
- CVE-2011-3298 — High (CVSS 7.9): Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series…
- CVE-2012-4660 — High (CVSS 7.8): The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module…
- CVE-2012-3058 — High (CVSS 7.8): Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst…
- CVE-2012-0356 — High (CVSS 7.8): Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst…
- CVE-2012-0355 — High (CVSS 7.8): Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst…