Vulnerabilities > CVE-2006-4775 - Resource Management Errors vulnerability in Cisco Catos and IOS
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 |
Common Weakness Enumeration (CWE)
References
- http://secunia.com/advisories/21896
- http://secunia.com/advisories/21896
- http://secunia.com/advisories/21902
- http://secunia.com/advisories/21902
- http://securitytracker.com/id?1016843
- http://securitytracker.com/id?1016843
- http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml
- http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml
- http://www.kb.cert.org/vuls/id/175148
- http://www.kb.cert.org/vuls/id/175148
- http://www.osvdb.org/28776
- http://www.osvdb.org/28776
- http://www.phenoelit.de/stuff/CiscoVTP.txt
- http://www.phenoelit.de/stuff/CiscoVTP.txt
- http://www.securityfocus.com/archive/1/445896/100/0/threaded
- http://www.securityfocus.com/archive/1/445896/100/0/threaded
- http://www.securityfocus.com/archive/1/445938/100/0/threaded
- http://www.securityfocus.com/archive/1/445938/100/0/threaded
- http://www.securityfocus.com/bid/19998
- http://www.securityfocus.com/bid/19998
- http://www.vupen.com/english/advisories/2006/3600
- http://www.vupen.com/english/advisories/2006/3600
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28925
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28925