CVE-2003-0512

Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identify valid usernames on the system and conduct brute force password guessing, as reported for the Aironet Bridge.

• CWE-310

• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0056.htmlVendor Advisory
• http://www.cisco.com/warp/public/707/cisco-sn-20030724-ios-enum.shtml
• http://www.kb.cert.org/vuls/id/886796US Government Resource
• http://www.vigilante.com/inetsecurity/advisories/VIGILANTE-2003002.htm
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5824
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0056.htmlVendor Advisory
• http://www.cisco.com/warp/public/707/cisco-sn-20030724-ios-enum.shtml
• http://www.kb.cert.org/vuls/id/886796US Government Resource
• http://www.vigilante.com/inetsecurity/advisories/VIGILANTE-2003002.htm
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5824

Published

Aug 27, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0506Microsoft NetMeeting 3.01 2000 before SP4 allows remote atta…
• CVE-2003-0507Stack-based buffer overflow in Active Directory in Windows 2…
• CVE-2003-0508Buffer overflow in the WWWLaunchNetscape function of Adobe A…
• CVE-2003-0509SQL injection vulnerability in Cyberstrong eShop 4.2 and ear…
• CVE-2003-0510Format string vulnerability in ezbounce 1.0 through 1.50 all…
• CVE-2003-0511The web server for Cisco Aironet AP1x00 Series Wireless devi…
• CVE-2003-0513Microsoft Internet Explorer allows remote attackers to bypas…
• CVE-2003-0514Apple Safari allows remote attackers to bypass intended cook…
• CVE-2003-0515SQL injection vulnerabilities in the (1) PostgreSQL or (2) M…
• CVE-2003-0516cnd.c in mgetty 1.1.28 and earlier does not properly filter …
• CVE-2003-0517faxrunqd.in in mgetty 1.1.28 and earlier allows local users …5.5
• CVE-2003-0518The screen saver in MacOS X allows users with physical acces…