CVE-2003-1004

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtmlPatch, Vendor Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtmlPatch, Vendor Advisory

Timeline

Published: Jan 5, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-10055.0The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 CVE-2003-10067.2Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to CVE-2003-10075.0AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.CVE-2003-10084.6Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to CVE-2003-100910.0Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication ser CVE-2003-10104.6Unknown vulnerability in fs_usage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges CVE-2003-10117.2Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys wh CVE-2003-10125.0The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a CVE-2003-10137.5The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q CVE-2003-10147.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use mu CVE-2003-10157.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use wh CVE-2003-10167.5Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use ma