CVE-2003-0305: Cisco IOS

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.

Affected products

• Cisco IOS: version 12.0(15)s only; version 12.0(15)sc only; version 12.0(15)sl only; version 12.0(16)s only; version 12.0(16)sc only; version 12.0(16)st only; …

Published 2003-06-09. Last modified 2026-06-16.