CVE-2003-0982 Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
HighCVSS 7.5
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco application and content networking software | = 4.0.3 | No fix listed |
| cisco application and content networking software | = 4.1.1 | No fix listed |
| cisco application and content networking software | = 4.1.3 | No fix listed |
| cisco application and content networking software | = 4.2 | No fix listed |
| cisco application and content networking software | = 4.2.7 | No fix listed |
| cisco application and content networking software | = 4.2.9 | No fix listed |
| cisco application and content networking software | = 5.0 | No fix listed |
| cisco application and content networking software | = 5.0.1 | No fix listed |
| cisco application and content networking software | = 5.0.3 | No fix listed |
| cisco content distribution manager 4630 | All versions | No fix listed |
| cisco content distribution manager 4630 | = 4.0 | No fix listed |
| cisco content distribution manager 4630 | = 4.1 | No fix listed |
| cisco content distribution manager 4650 | All versions | No fix listed |
| cisco content distribution manager 4650 | = 4.0 | No fix listed |
| cisco content distribution manager 4650 | = 4.1 | No fix listed |
| cisco content distribution manager 4670 | All versions | No fix listed |
| cisco content engine | = 507 | No fix listed |
| cisco content engine | = 507_2.2_.0 | No fix listed |
| cisco content engine | = 507_3.1 | No fix listed |
| cisco content engine | = 507_4.0 | No fix listed |
| cisco content engine | = 507_4.1 | No fix listed |
| cisco content engine | = 560 | No fix listed |
| cisco content engine | = 560_2.2_.0 | No fix listed |
| cisco content engine | = 560_3.1 | No fix listed |
| cisco content engine | = 560_4.0 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco content engine | = 560_4.1 | No fix listed |
| cisco content engine | = 590 | No fix listed |
| cisco content engine | = 590_2.2_.0 | No fix listed |
| cisco content engine | = 590_3.1 | No fix listed |
| cisco content engine | = 590_4.0 | No fix listed |
| cisco content engine | = 590_4.1 | No fix listed |
| cisco content engine | = 7320 | No fix listed |
| cisco content engine | = 7320_2.2_.0 | No fix listed |
| cisco content engine | = 7320_3.1 | No fix listed |
| cisco content engine | = 7320_4.0 | No fix listed |
| cisco content engine | = 7320_4.1 | No fix listed |
| cisco content engine module | = for_cisco_router_2600_series | No fix listed |
| cisco content engine module | = for_cisco_router_3600_series | No fix listed |
| cisco content engine module | = for_cisco_router_3700_series | No fix listed |
| cisco enterprise content delivery network software | = 4.0 | No fix listed |
| cisco enterprise content delivery network software | = 4.1 | No fix listed |
| cisco content router 4430 | All versions | No fix listed |
| cisco content router 4450 | All versions | No fix listed |
References
- 10409 third-party-advisory
- 20031210 Vulnerability in Authentication Library for ACNS patch vendor-advisory
- VU#352462 third-party-advisory us-government-resource
- 9187 patch vdb-entry vendor-advisory
- cisco-acns-password-bo(13945) vdb-entry