CVE-2003-0260: Medium severity Cisco Vpn 3015 Concentrator vulnerability
Published May 8, 2003
·Updated
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
Affected Software
62 affected components
Cisco Vpn 3015 Concentrator
Cisco Vpn 3030 Concentator
Cisco Vpn 3060 Concentrator
Cisco Vpn 3080 Concentrator
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.5.5
Cisco Vpn 3000 Concentrator Series Software=3.6
Cisco Vpn 3000 Concentrator Series Software=3.6.1
Cisco Vpn 3000 Concentrator Series Software=3.6.3
Cisco Vpn 3000 Concentrator Series Software=3.6.5
Cisco Vpn 3000 Concentrator Series Software=3.6.7
Cisco VPN 3002 Hardware Client
All of the following
Any of the following
Cisco Vpn 3015 Concentrator
Cisco Vpn 3030 Concentator
Cisco Vpn 3060 Concentrator
Cisco Vpn 3080 Concentrator
Cisco Vpn 3000 Concentrator Series Software=2.0
Cisco Vpn 3000 Concentrator Series Software=2.5.2.a
Cisco Vpn 3000 Concentrator Series Software=2.5.2.b
Cisco Vpn 3000 Concentrator Series Software=2.5.2.c
Cisco Vpn 3000 Concentrator Series Software=2.5.2.d
Cisco Vpn 3000 Concentrator Series Software=2.5.2.f
Cisco Vpn 3000 Concentrator Series Software=3.0
Cisco Vpn 3000 Concentrator Series Software=3.0.3.a
Cisco Vpn 3000 Concentrator Series Software=3.0.3.b
Cisco Vpn 3000 Concentrator Series Software=3.0.4
Cisco Vpn 3000 Concentrator Series Software=3.1
Cisco Vpn 3000 Concentrator Series Software=3.1\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.1.1
Cisco Vpn 3000 Concentrator Series Software=3.1.2
Cisco Vpn 3000 Concentrator Series Software=3.1.4
Cisco Vpn 3000 Concentrator Series Software=3.5\(rel\)
Cisco Vpn 3000 Concentrator Series Software=3.5.1
Cisco Vpn 3000 Concentrator Series Software=3.5.2
Cisco Vpn 3000 Concentrator Series Software=3.5.3
Cisco Vpn 3000 Concentrator Series Software=3.5.4
Cisco Vpn 3000 Concentrator Series Software=3.5.5
Cisco Vpn 3000 Concentrator Series Software=3.6
Cisco Vpn 3000 Concentrator Series Software=3.6.1
Cisco Vpn 3000 Concentrator Series Software=3.6.3
Cisco Vpn 3000 Concentrator Series Software=3.6.5
Cisco Vpn 3000 Concentrator Series Software=3.6.7
Cisco VPN 3002 Hardware Client
Remediation
Event History
May 8, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
May 27, 2003
Data Sourced
04:00 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0260?
CVE-2003-0260 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2003-0260?
To mitigate CVE-2003-0260, it is recommended to upgrade the affected Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client to the latest software version.
3
What products are affected by CVE-2003-0260?
CVE-2003-0260 affects Cisco VPN 3000 series concentrators and the Cisco VPN 3002 Hardware Client versions 2.x.x through 3.6.7A.
4
What type of attack does CVE-2003-0260 enable?
CVE-2003-0260 allows remote attackers to perform denial of service attacks by flooding the system with malformed ICMP packets.
5
Is there any public documentation for CVE-2003-0260?
Yes, Cisco provides public documentation regarding CVE-2003-0260, detailing its impact and remediation steps.