CVE-2006-4775
First published: Thu Sep 14 2006(Updated: )
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Puppet Cisco IOS | =12.1\(19\) | |
| Cisco CatOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml
- http://www.securityfocus.com/bid/19998
- http://secunia.com/advisories/21896
- http://secunia.com/advisories/21902
- http://www.phenoelit.de/stuff/CiscoVTP.txt
- http://securitytracker.com/id?1016843
- http://www.kb.cert.org/vuls/id/175148
- http://www.osvdb.org/28776
- http://www.vupen.com/english/advisories/2006/3600
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28925
- http://www.securityfocus.com/archive/1/445938/100/0/threaded
- http://www.securityfocus.com/archive/1/445896/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-4775?
CVE-2006-4775 is classified as a high severity vulnerability due to its potential to cause denial of service.
How does CVE-2006-4775 affect Cisco IOS and CatOS users?
CVE-2006-4775 allows remote attackers to disrupt service by exploiting the VLAN Trunking Protocol feature.
What are the potential consequences of CVE-2006-4775?
The exploitation of CVE-2006-4775 can lead to a complete denial of service, impacting network availability.
How do I fix CVE-2006-4775?
To mitigate CVE-2006-4775, it is recommended to upgrade to a patched version of Cisco IOS or CatOS that addresses the vulnerability.
What systems are affected by CVE-2006-4775?
CVE-2006-4775 affects Cisco IOS version 12.1(19) and specific versions of Cisco CatOS that utilize VLAN Trunking Protocol.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/remedy
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/12.1\(19\)
- canonical/cisco catos