CVE:CVE-2003-0982
CNNVD:CNNVD-200401-016
Cisco ACNS为新一代思科企业内容供应网络解决方案。
Cisco ACNS的验证库存在缓冲区溢出问题，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令或进行拒绝服务攻击。
通过可以提交超长的密码，在ACNS验证模块上触发缓冲区溢出，精心构建提交数据可能以进程权限在系统上执行任意指令。当然此问题也可以造成设备拒绝服务。
solution:Upgrade cisco application_and_content_networking_software to a higher version than 4.0.3,4.1.1,4.1.3,4.2,4.2.7,4.2.9,5.0,5.0.1,5.0.3,and avoid the version 4.0.3,4.1.1,4.1.3,4.2,4.2.7,4.2.9,5.0,5.0.1,5.0.3; Upgrade cisco content_distribution_manager_4630 to a higher version than *,4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco content_distribution_manager_4650 to a higher version than *,4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco content_distribution_manager_4670 to a higher version than *; Upgrade cisco content_engine to a higher version than 507,507_2.2_.0,507_3.1,507_4.0,507_4.1,560,560_2.2_.0,560_3.1,560_4.0,560_4.1,590,590_2.2_.0,590_3.1,590_4.0,590_4.1,7320,7320_2.2_.0,7320_3.1,7320_4.0,7320_4.1,and avoid the version 507,507_2.2_.0,507_3.1,507_4.0,507_4.1,560,560_2.2_.0,560_3.1,560_4.0,560_4.1,590,590_2.2_.0,590_3.1,590_4.0,590_4.1,7320,7320_2.2_.0,7320_3.1,7320_4.0,7320_4.1; Upgrade cisco content_engine_module to a higher version than for_cisco_router_2600_series,for_cisco_router_3600_series,for_cisco_router_3700_series,and avoid the version for_cisco_router_2600_series,for_cisco_router_3600_series,for_cisco_router_3700_series; Upgrade cisco enterprise_content_delivery_network_software to a higher version than 4.0,4.1,and avoid the version 4.0,4.1; Upgrade cisco content_router_4430 to a higher version than *; Upgrade cisco content_router_4450 to a higher version than *