What’s Vulnerable › Vulnerabilities

CVE-2000-0380

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 35.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2000-04-26 · updated 2026-06-16
• Weakness: CWE-20

Description

The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.

Affected products

• Cisco IOS: 11.1, 11.2, 11.2(4)f1, 11.2(8), 11.2(8)p, 11.2(9)p (+33)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html
• http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml
• http://www.osvdb.org/1302
• http://www.securityfocus.com/bid/1154
• http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html
• http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml
• http://www.osvdb.org/1302
• http://www.securityfocus.com/bid/1154

Get alerted when CVE-2000-0380 or the next vulnerability affects your stack