Home  >  CVE-2003-1096
CVE Details for CVE: CVE-2003-1096
Summary
The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2003 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:cisco:leap:*:*:*:*:*:*:*:*
    cpe:2.3:a:cisco:leap:*:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 8755
bugtraq
  • 20031003 Dictionary attack against Cisco's LEAP, Wireless LANs vulnerable
  • 20031006 Weaknesses in LEAP Challenge/Response
  • 20040407 Release of Cisco Attack tool Asleap
cert-vn VU#473108
cisco 20030803 Dictionary Attack on Cisco LEAP Vulnerability
osvdb 15209
xf cisco-leap-dictionary(12804)