CVE-2003-1132 — MEDIUM (5.0)

Vulnerability Description

The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0 ("No Error"), which allows remote attackers to cause a denial of service (inaccessible domain) by forcing other DNS servers to send and cache a request for a AAAA record to the vulnerable server.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Cisco	Content Services Switch 11000	All versions
Cisco	Content Services Switch 11500	All versions

References

http://www.cisco.com/warp/public/707/cisco-sa-20030430-dns.shtmlVendor Advisory
http://www.kb.cert.org/vuls/id/714121US Government Resource
http://www.cisco.com/warp/public/707/cisco-sa-20030430-dns.shtmlVendor Advisory
http://www.kb.cert.org/vuls/id/714121US Government Resource

FAQ

What is CVE-2003-1132?

CVE-2003-1132 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response code 3 (NXDOMAIN or "Name Error") instead of response code 0 ...

How severe is CVE-2003-1132?

CVE-2003-1132 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-1132?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Content Services Switch 11000, Cisco Content Services Switch 11500.