CVE:CVE-2003-1002
CNNVD:CNNVD-200401-024
Cisco Firewall Services Module（FWSM）是美国思科（Cisco）公司的一个防火墙服务模块，它用以部署在6500系列交换机和7600系列路由器上提供流量加速功能。
CISCO FWSM存在2个漏洞，允许远程攻击者进行拒绝服务攻击或在设备上执行任意指令。
CSCeb16356 (HTTP Auth)漏洞：
传递使用TACACS+或RADIUS验证的HTTP Auth请求，可使Cisco FWSM由于发送缓冲区溢出崩溃并重载。这个请求可以由用户通过发起FTP，TELNET或者HTTP连接而初始化。如果用户名和密码被指定的ACACS+或RADIUS服务器验证通过，Cisco FWSM才允许通信通过。
CSCeb88419 (SNMPv3)漏洞
当Cisco FWSM模块上配置snmp-server host <if_name> <ip_addr>或snmp-server host <if_name> <ip_addr> poll时，处理接收到的SNMPv3消息时可使CISCO FWSM崩溃，产生拒绝服务。
只要当Cisco FWSM模块上配置snmp-server host <if_name> <ip_addr> trap命令时才不受此漏洞影响。
solution:Upgrade cisco catalyst_6500 to a higher version than *; Upgrade cisco catalyst_6500_ws-svc-nam-1 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_6500_ws-svc-nam-2 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_6500_ws-x6380-nam to a higher version than 2.1(2,3.1(1a,and avoid the version 2.1(2),3.1(1a); Upgrade cisco catalyst_7600_ws-svc-nam-1 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_7600_ws-svc-nam-2 to a higher version than 2.2(1a,3.1(1a,and avoid the version 2.2(1a),3.1(1a); Upgrade cisco catalyst_7600_ws-x6380-nam to a higher version than 2.1(2,3.1(1a,and avoid the version 2.1(2),3.1(1a); Upgrade cisco firewall_services_module to a higher version than *,1.1.2,and avoid the version 1.1.2; Upgrade cisco catos to a higher version than 5.4(1,7.5(1,7.6(1,and avoid the version 5.4(1),7.5(1),7.6(1)