Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2000-0380

EPSS 85.12% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2000-0380

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IOS Web管理接口"%%"字串远程拒绝服务攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS是广泛运行于Cisco系统各种网络设备中的操作系统。 多种Cisco路由器运行的IOS的HTTP管理接口实现上存在漏洞,远程攻击者可能利用此漏洞对设备进行拒绝服务攻击。 如果这些路由器启动了一个WEB服务器,用来对路由器进行管理或者其他操作的话,(通常是通过添加"ip http server "类似的命令来启动web服务的)攻击者只要提交一个URL: http://victim.router/%% ,就能导致路由器崩溃。有些路由器会自动重起,有的则必须手工关闭电源并启动才能使路由器恢复正
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2000-0380

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2000-0380

登录查看更多情报信息。

Same Patch Batch · n/a · 2000-07-12 · 140 CVEs total

CVE-2000-0417Cayman 3220-H DSL路由器DoS漏洞
CVE-2000-0452Lotus Domino Server ESMTP远程缓冲区溢出漏洞
CVE-2000-0442Qualcomm Qpopper 'EUIDL'格式字符串输入漏洞
CVE-2000-0441AIX文件系统漏洞
CVE-2000-0439Microsoft Internet Explorer 安全漏洞
CVE-2000-0438Multiple Linux 供应商fdmount缓冲区溢出漏洞
CVE-2000-0437Gauntlet防火墙远程缓冲区溢出漏洞
CVE-2000-0436MetaProducts Offline Explorer目录遍历漏洞
CVE-2000-0435Allmanage管理员密码检索漏洞
CVE-2000-0432calender.pl/calendar_admin.pl脚本远程执行任意命令漏洞
CVE-2000-0431Cobalt RaQ2和RaQ3访问控制漏洞
CVE-2000-0428InterScan VirusWall 文件名转换器缓冲区溢出漏洞
CVE-2000-0427Aladdin Knowledge Systems eToken PIN Extraction 漏洞
CVE-2000-0425L-Soft Listserv 1.8 Web Archives的缓冲区溢出漏洞
CVE-2000-0424George Burgyan CGI Counter输入验证漏洞
CVE-2000-0421Bugzilla远程任意命令这些漏洞
CVE-2000-0419Microsoft Office 2000 UA Control漏洞
CVE-2000-0418Cayman 3220H DSL路由器 "ping of death"漏洞
CVE-2000-0404Microsoft Windows Computer Browser重置漏洞
CVE-2000-0402Microsoft SQL Server 7.0系统管理员密码泄露漏洞

Showing top 20 of 140 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2000-0380

No comments yet


Leave a comment