CVE-2003-1096 The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute fo...
HighCVSS 10.0
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco leap | All versions | No fix listed |
References
- 20040407 Release of Cisco Attack tool Asleap mailing-list
- 20030803 Dictionary Attack on Cisco LEAP Vulnerability vendor-advisory
- VU#473108 third-party-advisory us-government-resource
- 15209 vdb-entry
- 20031003 Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable mailing-list
- 20031006 Weaknesses in LEAP Challenge/Response mailing-list
- 8755 exploit vdb-entry
- cisco-leap-dictionary(12804) vdb-entry