Vulnerability Description
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Vpn 3015 Concentrator | All versions |
| Cisco | Vpn 3030 Concentator | All versions |
| Cisco | Vpn 3060 Concentrator | All versions |
| Cisco | Vpn 3080 Concentrator | All versions |
| Cisco | Vpn 3000 Concentrator Series Software | 2.0 |
| Cisco | Vpn 3002 Hardware Client | All versions |
References
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtmlPatchVendor Advisory
- http://www.kb.cert.org/vuls/id/221164US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11956
- http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtmlPatchVendor Advisory
- http://www.kb.cert.org/vuls/id/221164US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11956
FAQ
What is CVE-2003-0260?
CVE-2003-0260 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ...
How severe is CVE-2003-0260?
CVE-2003-0260 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0260?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Vpn 3015 Concentrator, Cisco Vpn 3030 Concentator, Cisco Vpn 3060 Concentrator, Cisco Vpn 3080 Concentrator, Cisco Vpn 3000 Concentrator Series Software.