CVE-2000-0380 The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
HighCVSS 7.1
EPSS 35.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 11.1 | No fix listed |
| cisco ios | = 11.2 | No fix listed |
| cisco ios | = 11.2(4)f1 | No fix listed |
| cisco ios | = 11.2(8) | No fix listed |
| cisco ios | = 11.2(8)p | No fix listed |
| cisco ios | = 11.2(9)p | No fix listed |
| cisco ios | = 11.2(9)xa | No fix listed |
| cisco ios | = 11.2(10) | No fix listed |
| cisco ios | = 11.2(10)bc | No fix listed |
| cisco ios | = 11.2(17) | No fix listed |
| cisco ios | = 11.2p | No fix listed |
| cisco ios | = 11.3 | No fix listed |
| cisco ios | = 11.3(1) | No fix listed |
| cisco ios | = 11.3(1)ed | No fix listed |
| cisco ios | = 11.3(1)t | No fix listed |
| cisco ios | = 11.3t | No fix listed |
| cisco ios | = 12.0 | No fix listed |
| cisco ios | = 12.0(1)w | No fix listed |
| cisco ios | = 12.0(1)xa3 | No fix listed |
| cisco ios | = 12.0(1)xb | No fix listed |
| cisco ios | = 12.0(1)xe | No fix listed |
| cisco ios | = 12.0(2) | No fix listed |
| cisco ios | = 12.0(2)xc | No fix listed |
| cisco ios | = 12.0(2)xd | No fix listed |
| cisco ios | = 12.0(2)xf | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.0(2)xg | No fix listed |
| cisco ios | = 12.0(3)t2 | No fix listed |
| cisco ios | = 12.0(4) | No fix listed |
| cisco ios | = 12.0(4)s | No fix listed |
| cisco ios | = 12.0(4)t | No fix listed |
| cisco ios | = 12.0(5) | No fix listed |
| cisco ios | = 12.0(5)t1 | No fix listed |
| cisco ios | = 12.0(6) | No fix listed |
| cisco ios | = 12.0(7)t | No fix listed |
| cisco ios | = 12.0(8) | No fix listed |
| cisco ios | = 12.0(9)s | No fix listed |
| cisco ios | = 12.0db | No fix listed |
| cisco ios | = 12.0s | No fix listed |
| cisco ios | = 12.0t | No fix listed |
References
- 20000426 Cisco HTTP possible bug: mailing-list
- 20000514 Cisco IOS HTTP Server Vulnerability vendor-advisory
- 1302 vdb-entry
- 1154 vdb-entry