CVE-2003-0512: Medium severity Cisco IOS vulnerability
Published Jul 29, 2003
·Updated
Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge.
Affected Software
9 affected components
Cisco IOS=12.0\(24\)s1
Cisco IOS=12.0\(24.2\)s
Cisco IOS=12.2\(11\)ja1
Cisco IOS=12.2\(14.5\)
Cisco IOS=12.2\(14.5\)t
Cisco IOS=12.2\(15\)zn
Cisco IOS=12.2\(15.1\)s
Cisco IOS=12.2\(16\)b
Cisco IOS=12.2\(16.1\)b
Event History
Jul 29, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 27, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityWeaknessAffected Software