CVE-2003-0260

Cisco VPN 3000 Series & VPN 3002 Client 2.x.x-3.6.7A DoS via Malformed ICMP Flood

Title source: llm
STIX 2.1

Description

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/11956
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/221164
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/warp/public/707/cisco-sa-20030507-vpn3k.shtml

Scores

EPSS 0.0213
EPSS Percentile 80.0%

Details

Status published
Products (31)
cisco/vpn_3000_concentrator_series_software 2.0
cisco/vpn_3000_concentrator_series_software 2.5.2.a
cisco/vpn_3000_concentrator_series_software 2.5.2.b
cisco/vpn_3000_concentrator_series_software 2.5.2.c
cisco/vpn_3000_concentrator_series_software 2.5.2.d
cisco/vpn_3000_concentrator_series_software 2.5.2.f
cisco/vpn_3000_concentrator_series_software 3.0
cisco/vpn_3000_concentrator_series_software 3.0.3.a
cisco/vpn_3000_concentrator_series_software 3.0.3.b
cisco/vpn_3000_concentrator_series_software 3.0.4
... and 21 more
Published May 27, 2003
Tracked Since Feb 18, 2026