VULNERABILITY INTELLIGENCE

CVE-2003-0647

CVSS score7.5 HIGH

EPSS probability5.93%

CISA KEVNot currently listed

Published2003-08-27

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.

Primary references

cve@mitre.org — Patch, Vendor Advisory
cve@mitre.org — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource