CVE-2003-0305: Medium severity Cisco IOS vulnerability

Published May 17, 2003

Updated

The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.

Affected Software

48 affected components

Cisco IOS=12.0\(15\)s

Cisco IOS=12.0\(15\)sc

Cisco IOS=12.0\(15\)sl

Cisco IOS=12.0\(16\)s

Cisco IOS=12.0\(16\)sc

Cisco IOS=12.0\(16\)st

Cisco IOS=12.0\(17\)s

Cisco IOS=12.0\(17\)sl

Cisco IOS=12.0\(18\)s

Cisco IOS=12.0\(18\)sl

Cisco IOS=12.0\(19\)s

Cisco IOS=12.0\(19\)sl

Cisco IOS=12.0\(19\)sp

Cisco IOS=12.0\(20\)sl

Cisco IOS=12.0\(20\)sp

Cisco IOS=12.0\(21\)s

Cisco IOS=12.0\(21\)sl

Cisco IOS=12.0\(21\)sx

Cisco IOS=12.1\(8\)ea

Cisco IOS=12.1\(9\)ea

Cisco IOS=12.1\(10\)

Cisco IOS=12.1\(10\)e

Cisco IOS=12.1\(10\)ec

Cisco IOS=12.1\(10\)ex

Cisco IOS=12.1\(10\)ey

Cisco IOS=12.1\(10.5\)ec

Cisco IOS=12.1\(10a\)

Cisco IOS=12.1\(11\)

Cisco IOS=12.1\(11.5\)e

Cisco IOS=12.1\(11a\)

Cisco IOS=12.1\(11b\)

Cisco IOS=12.1\(11b\)e

Cisco IOS=12.1\(12\)

Cisco IOS=12.1\(12a\)

Cisco IOS=12.1\(12b\)

Cisco IOS=12.1\(12c\)

Cisco IOS=12.1\(13\)

Cisco IOS=12.1\(14\)

Cisco IOS=12.1\(14.5\)

Cisco IOS=12.2\(6.8a\)

Cisco IOS=12.2\(7\)

Cisco IOS=12.2\(7\)da

Cisco IOS=12.2\(7a\)

Cisco IOS=12.2\(7b\)

Cisco IOS=12.2\(7c\)

Cisco IOS=12.2\(9\)s

Cisco IOS=12.2\(9.4\)da

Cisco IOS=12.2\(10.5\)s

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sa-20030515-saa.shtml

Event History

May 17, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Jun 9, 2003

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0305?

CVE-2003-0305 is rated as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2003-0305?

To fix CVE-2003-0305, update the Cisco IOS to a patched version that addresses the vulnerability.

Which versions of Cisco IOS are affected by CVE-2003-0305?

CVE-2003-0305 affects Cisco IOS versions from 12.0 through 12.2.

Can CVE-2003-0305 be exploited remotely?

Yes, CVE-2003-0305 can be exploited remotely by sending malformed RTR packets to port 1967.

What impact does CVE-2003-0305 have on systems?

CVE-2003-0305 can cause affected Cisco devices to crash, leading to a denial of service.