CVE-2003-1096
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco LEAP challenge/response认证机制以一种易受字典式攻击的方法使用密码。远程攻击者更容易借助强力密码猜测攻击提升特权。
Public Exploits 1
ExploitDB · 1
EDB-23212 [remote]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-1096
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco LEAP密码泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco LEAP challenge/response认证机制以一种易受字典式攻击的方法使用密码。远程攻击者更容易借助强力密码猜测攻击提升特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-1096
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-1096
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-1096 (5)
-
-
🔗 VU#473108 - Cisco Lightweight Extensible Authentication Protocol (LEAP) uses passwords that are vulnerable to dictionary attacks Read full article third-party-advisory x_refsource_CERT-VN
-
-
-
Mailing List Discussions for CVE-2003-1096 (1)
Other References for CVE-2003-1096 (1)
Same Patch Batch · n/a · 2005-03-10 · 24 CVEs total
| CVE-2004-1760 | Cisco Voice Product IBM Director Agent无需验证获取远程管理权限访问漏洞 | |
| CVE-2005-0707 | Ipswitch Collaboration Suite IMAP EXAMINE命令缓冲区溢出漏洞 | |
| CVE-2004-1770 | cPanel登录脚本远程命令执行漏洞 | |
| CVE-2004-1769 | cPanel Resetpass远程命令执行漏洞 | |
| CVE-2004-1768 | Symantec Brightmail多个远程服务拒绝漏洞 | |
| CVE-2004-1767 | Sun Solaris modload()未授权内核模块装载漏洞 | |
| CVE-2004-1766 | NetScreen Security Manager不安全默认远程通信漏洞 | |
| CVE-2004-1765 | Apache Mod_Security模块SecFilterScanPost Off-By-One缓冲溢出漏洞 | |
| CVE-2004-1764 | HP-UX缓冲区溢出漏洞 | |
| CVE-2004-1763 | HAHTsite Scenario Server项目文件名缓冲区溢出漏洞 | |
| CVE-2004-1762 | Linux Hotfix Secure Anti-Virus (FSAV)未知漏洞 | |
| CVE-2004-1761 | Ethereal未知漏洞 | |
| CVE-2003-1090 | Celestial Software AbsoluteTelnet标题栏远程缓冲区溢出漏洞 | |
| CVE-2004-1759 | Cisco Voice Product IBM Director Agent端口扫描拒绝服务漏洞 | |
| CVE-2004-1758 | BEA WebLogic Server和Express密码泄露漏洞 | |
| CVE-2004-1757 | BEA WebLogic Operator/Admin密码泄露漏洞 | |
| CVE-2004-1756 | BEA WebLogic Server和WebLogic Express证书链用户假冒漏洞 | |
| CVE-2004-1755 | BEA WebLogic Server和Express SSL客户端权限提升漏洞 | |
| CVE-2003-1095 | BEA WebLogic Web应用程序验证可绕过漏洞 | |
| CVE-2003-1094 | BEA WebLogic Server和WebLogic Express用户假冒漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2003-1096
No comments yet