VAR-200305-0056

Vulnerability from variot - Updated: 2025-04-03 22:25

Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002. It has been reported that some versions of the Cisco Secure ACS software do not properly handle input supplied during authentication. Because of this, it may be possible for a remote attacker to gain unauthorized access to a host using the vulnerable software. The management service of Cisco Secure ACS listens on TCP port 2002 and provides WEB-based management. When CSAdmin processes the login request, there is a buffer overflow. If an overlong user parameter is sent to the service program, the service can be suspended, and it needs to be restarted to obtain normal service. It may execute arbitrary commands with system privileges. The BUG ID of this vulnerability is: CSCea51366

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200305-0056",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.6.4"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "3.0.1"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.6.3"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.1"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.4"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.6"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.6.2"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.3"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.5"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.3"
      },
      {
        "model": "secure access control server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.1"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.1"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.3"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.1"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.6.4"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.6.3"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.6.2"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.6"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.3"
      },
      {
        "model": "secure acs for windows nt",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.1"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "db": "BID",
        "id": "7413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco Security bulletin",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2003-0210",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2003-0210",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 1.0,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "VHN-7039",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2003-0210",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#697049",
            "trust": 0.8,
            "value": "6.24"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200305-032",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-7039",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7039"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002. It has been reported that some versions of the Cisco Secure ACS software do not properly handle input supplied during authentication.  Because of this, it may be possible for a remote attacker to gain unauthorized access to a host using the vulnerable software. The management service of Cisco Secure ACS listens on TCP port 2002 and provides WEB-based management. When CSAdmin processes the login request, there is a buffer overflow. If an overlong user parameter is sent to the service program, the service can be suspended, and it needs to be restarted to obtain normal service. It may execute arbitrary commands with system privileges. The BUG ID of this vulnerability is: CSCea51366",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      },
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "db": "BID",
        "id": "7413"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7039"
      }
    ],
    "trust": 1.98
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#697049",
        "trust": 2.5
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0210",
        "trust": 2.0
      },
      {
        "db": "BID",
        "id": "7413",
        "trust": 1.2
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032",
        "trust": 0.7
      },
      {
        "db": "CISCO",
        "id": "20030423 CISCO SECURE ACCESS CONTROL SERVER FOR WINDOWS ADMIN BUFFER OVERFLOW VULNERABILITY",
        "trust": 0.6
      },
      {
        "db": "BUGTRAQ",
        "id": "20030424 NSFOCUS SA2003-04 : REMOTE BUFFER OVERFLOW VULNERABILITY IN WEB MANAGEMENT INTERFACE OF CISCO SECURE ACS",
        "trust": 0.6
      },
      {
        "db": "NTBUGTRAQ",
        "id": "20030424 NSFOCUS SA2003-04 : REMOTE BUFFER OVERFLOW VULNERABILITY IN WEB MANAGEMENT INTERFACE OF CISCO SECURE ACS",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-7039",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7039"
      },
      {
        "db": "BID",
        "id": "7413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "id": "VAR-200305-0056",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-7039"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-03T22:25:18.822000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.5,
        "url": "http://www.cisco.com/warp/public/707/cisco-sa-20030423-acs.shtml"
      },
      {
        "trust": 1.7,
        "url": "http://www.kb.cert.org/vuls/id/697049"
      },
      {
        "trust": 1.0,
        "url": "http://marc.info/?l=bugtraq\u0026m=105120066126196\u0026w=2"
      },
      {
        "trust": 1.0,
        "url": "http://marc.info/?l=ntbugtraq\u0026m=105118056332344\u0026w=2"
      },
      {
        "trust": 0.8,
        "url": "http://www.cisco.com/warp/public/cc/pd/sqsw/sq/"
      },
      {
        "trust": 0.8,
        "url": "http://www.cisco.com/application/pdf/en/us/guest/products/ps407/c1629/ccmigration_09186a00801085d0.pdf"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/bid/7413"
      },
      {
        "trust": 0.8,
        "url": "http://www.securityfocus.com/archive/1/319576"
      },
      {
        "trust": 0.8,
        "url": "http://www.nsfocus.com/english/homepage/sa2003-04.htm"
      },
      {
        "trust": 0.8,
        "url": "http://www.ietf.org/html.charters/aaa-charter.html"
      },
      {
        "trust": 0.8,
        "url": "http://www.cisco.com/warp/public/707/advisory.html"
      },
      {
        "trust": 0.6,
        "url": "http://marc.theaimsgroup.com/?l=bugtraq\u0026m=105120066126196\u0026w=2"
      },
      {
        "trust": 0.6,
        "url": "http://marc.theaimsgroup.com/?l=ntbugtraq\u0026m=105118056332344\u0026w=2"
      },
      {
        "trust": 0.3,
        "url": "/archive/1/319483"
      },
      {
        "trust": 0.3,
        "url": "/archive/1/319576"
      },
      {
        "trust": 0.1,
        "url": "http://marc.info/?l=bugtraq\u0026amp;m=105120066126196\u0026amp;w=2"
      },
      {
        "trust": 0.1,
        "url": "http://marc.info/?l=ntbugtraq\u0026amp;m=105118056332344\u0026amp;w=2"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7039"
      },
      {
        "db": "BID",
        "id": "7413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7039"
      },
      {
        "db": "BID",
        "id": "7413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2003-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "date": "2003-05-12T00:00:00",
        "db": "VULHUB",
        "id": "VHN-7039"
      },
      {
        "date": "2003-04-23T00:00:00",
        "db": "BID",
        "id": "7413"
      },
      {
        "date": "2003-04-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "date": "2003-05-12T04:00:00",
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2003-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#697049"
      },
      {
        "date": "2016-10-18T00:00:00",
        "db": "VULHUB",
        "id": "VHN-7039"
      },
      {
        "date": "2009-07-11T21:07:00",
        "db": "BID",
        "id": "7413"
      },
      {
        "date": "2005-10-20T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      },
      {
        "date": "2025-04-03T01:03:51.193000",
        "db": "NVD",
        "id": "CVE-2003-0210"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco Secure ACS for Windows CSAdmin vulnerable to buffer overflow via login requests",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#697049"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Boundary Condition Error",
    "sources": [
      {
        "db": "BID",
        "id": "7413"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200305-032"
      }
    ],
    "trust": 0.9
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.