CVE-2006-4775: High severity Cisco IOS vulnerability

Published Sep 14, 2006

Updated

The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context.

Affected Software

2 affected components

Cisco IOS=12.1\(19\)

Cisco CatOS

Remediation

Patch Available

http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml

Event History

Sep 14, 2006

CVE Published

12:07 AM

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4775?

CVE-2006-4775 is classified as a high severity vulnerability due to its potential to cause denial of service.

How does CVE-2006-4775 affect Cisco IOS and CatOS users?

CVE-2006-4775 allows remote attackers to disrupt service by exploiting the VLAN Trunking Protocol feature.

What are the potential consequences of CVE-2006-4775?

The exploitation of CVE-2006-4775 can lead to a complete denial of service, impacting network availability.

How do I fix CVE-2006-4775?

To mitigate CVE-2006-4775, it is recommended to upgrade to a patched version of Cisco IOS or CatOS that addresses the vulnerability.

What systems are affected by CVE-2006-4775?

CVE-2006-4775 affects Cisco IOS version 12.1(19) and specific versions of Cisco CatOS that utilize VLAN Trunking Protocol.