CVSS: 7.1EPSS: 96%CPEs: 39EXPL: 1CVE-2000-0380 – Cisco IOS 11.x/12.x - HTTP %%
https://notcve.org/view.php?id=CVE-2000-0380
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string. • https://www.exploit-db.com/exploits/19882 http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml http://www.osvdb.org/1302 http://www.securityfocus.com/bid/1154 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1465
https://notcve.org/view.php?id=CVE-1999-1465
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862. • http://ciac.llnl.gov/ciac/bulletins/j-016.shtml http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml https://exchange.xforce.ibmcloud.com/vulnerabilities/1401 •
CVSS: 5.0EPSS: 2%CPEs: 5EXPL: 0CVE-1999-0157
https://notcve.org/view.php?id=CVE-1999-0157
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. • http://www.osvdb.org/1097 •
CVSS: 5.0EPSS: 2%CPEs: 16EXPL: 0CVE-1999-0159
https://notcve.org/view.php?id=CVE-1999-0159
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0159 •