CVE-2003-0259

Cisco VPN 3000 Series & VPN 3002 Hardware Client 2.x.x-3.6.7 DoS via Malformed SSH Packet

Title source: llm
STIX 2.1

Description

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.

References (3)

Core 3
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/317348
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11955

Scores

EPSS 0.0213
EPSS Percentile 80.0%

Details

Status published
Products (36)
cisco/vpn_3000_concentrator_series_software 2.0
cisco/vpn_3000_concentrator_series_software 2.5.2.a
cisco/vpn_3000_concentrator_series_software 2.5.2.b
cisco/vpn_3000_concentrator_series_software 2.5.2.c
cisco/vpn_3000_concentrator_series_software 2.5.2.d
cisco/vpn_3000_concentrator_series_software 2.5.2.f
cisco/vpn_3000_concentrator_series_software 3.0
cisco/vpn_3000_concentrator_series_software 3.0.3.a
cisco/vpn_3000_concentrator_series_software 3.0.3.b
cisco/vpn_3000_concentrator_series_software 3.0.4
... and 26 more
Published May 27, 2003
Tracked Since Feb 18, 2026