CVE-2003-1096
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 10%
from disclosure to weapon0 days
Published on NVDMar 10
1st PoCOct 3
exploitation probability
10%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/23212⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=108135227731965&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/12804http://www.cisco.com/warp/public/707/cisco-sn-20030802-leap.shtmlhttp://www.kb.cert.org/vuls/id/473108http://www.osvdb.org/15209http://www.securityfocus.com/archive/1/340119http://www.securityfocus.com/archive/1/340365http://www.securityfocus.com/bid/8755