CVE-2003-0567

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 17%

from disclosure to weapon0 days

Published on NVDJul 25

1st PoCJul 18

exploitation probability

17%top 3% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/60 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/59 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/62

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006743.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5603 http://www.cert.org/advisories/CA-2003-15.html http://www.cert.org/advisories/CA-2003-17.html http://www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml http://www.kb.cert.org/vuls/id/411332