CVE-2003-0210

Vulnerability

Cisco Secure ACS for Windows before version 3.1.2 contains a buffer overflow in the web-based administration service (CSAdmin), which listens on TCP port 2002. The vulnerability is triggered when a long user parameter is sent in a login request to the service [1][2]. This affects all versions prior to 3.1.2 and has been assigned Cisco Bug ID CSCea51366 [2].

Exploitation

An attacker can exploit this vulnerability without authentication by sending a crafted HTTP request with an overly long user parameter to port 2002 of the ACS server. The buffer overflow occurs during CSAdmin process servicing the login request [2]. No special network position is required beyond reachability to the affected port.

Impact

Successful exploitation causes the CSAdmin service to hang, resulting in a denial of service. It may also allow arbitrary code execution with the privileges of the CSAdmin process, potentially leading to full remote compromise of the system [1][2].

Mitigation

Cisco released version 3.1.2 which includes a fix for this vulnerability as of the advisory date (2003-04-23) [1]. Users should upgrade to Cisco Secure ACS version 3.1.2 or later. No workarounds are documented in the available references. This vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.