CVE-2003-0647

Cisco IOS <12.2 - RCE

Title source: llm

Description

Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.

Exploits (1)

exploitdb WORKING POC VERIFIED

by FX · cremotehardware

https://www.exploit-db.com/exploits/77

View Code ZIP pw:eip

References (2)

[Patch, Vendor Advisory] http://www.cisco.com/warp/public/707/cisco-sn-20030730-ios-2gb-get.shtml

[Patch, Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/579324

Scores

EPSS 0.1236

EPSS Percentile 93.9%

Details

Status published

Products (1)

cisco/ios < 12.2

Published Aug 27, 2003

Tracked Since Feb 18, 2026