PT-2003-1991 · Cisco · Cisco Acns

Published 2003-12-11 · Updated 2018-10-30 · CVE-2003-0982

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco ACNS versions 4.x through 4.2.10 Cisco ACNS versions 5.x through 5.0.4

Description A buffer overflow issue exists in the authentication module, allowing remote attackers to execute arbitrary code via a long password.

Recommendations For Cisco ACNS versions 4.x through 4.2.10, update to version 4.2.11 or later. For Cisco ACNS versions 5.x through 5.0.4, update to version 5.0.5 or later.

Fix

Related Identifiers

CVE-2003-0982

Affected Products

Cisco Acns

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2003-0982 · Security Note
• http://securityfocus.com/bid/9187 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-sa-20031210-ACNS-auth.shtml · Vendor Advisory
• http://kb.cert.org/vuls/id/352462 · Note
• http://secunia.com/advisories/10409 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13945 · Note