NVD

Id
73639  
Name
CVE-2003-0512  
Description
Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2003-08-27  
Modified Date
2009-03-04  
Seq
2003-0512  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378926 73639 CVE-2003-0512 20030728 Cisco Aironet AP1100 Valid Account Disclosure Vulnerability  View
378927 73639 CVE-2003-0512 oval:org.mitre.oval:def:5824  View
378928 73639 CVE-2003-0512 20030724 Enumerating Locally Defined Users in Cisco IOS  View
378929 73639 CVE-2003-0512 VU#886796  View
378930 73639 CVE-2003-0512 http://www.vigilante.com/inetsecurity/advisories/VIGILANTE-2003002.htm  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63507 JVNDB-2003-000233 Cisco IOS におけるユーザ情報漏洩の脆弱性 Cisco IOS の特定のバージョンには、telnet 経由でのパスワード認証時に、その認証結果の応答がユーザ名により異なる脆弱性が存在します。 CVE-2003-0512 7338 CVE-2003-0512 73639 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000233.html 2003-07-28 2007-04-01 View