CVE-2003-1001: Cisco Catalyst 6500

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication.

Affected products

• Cisco Catalyst 6500: any version
• Cisco Catalyst 6500 Ws-Svc-Nam-1: version 2.2(1a) only; version 3.1(1a) only
• Cisco Catalyst 6500 Ws-Svc-Nam-2: version 2.2(1a) only; version 3.1(1a) only
• Cisco Catalyst 6500 Ws-x6380-Nam: version 2.1(2) only; version 3.1(1a) only
• Cisco Catalyst 7600 Ws-Svc-Nam-1: version 2.2(1a) only; version 3.1(1a) only
• Cisco Catalyst 7600 Ws-Svc-Nam-2: version 2.2(1a) only; version 3.1(1a) only
• Cisco Catalyst 7600 Ws-x6380-Nam: version 2.1(2) only; version 3.1(1a) only
• Cisco Catos: version 5.4(1) only; version 7.5(1) only; version 7.6(1) only
• Cisco Firewall Services Module: any version; version 1.1.2 only

Published 2004-01-05. Last modified 2026-06-16.