CVE Feed

    Dashboard / CVE / CVE-2006-4775

    CVE-2006-4775

    The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context.

    Published:Sep 14, 2006
    Last Modified:Apr 16, 2026
    EPS:Sep 14, 2006
    EPSS Score:0.06347
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    Catos
    Vendor
    Cisco
    Product
    Ios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2008-4963 (CVSS 7.1) — Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the …
    CVE-2008-0960 (CVSS 10) — SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1;…
    CVE-2007-5651 (CVSS 7.1) — Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and…
    CVE-2007-5134 (CVSS 5) — Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOB…
    CVE-2005-4258 (CVSS 7.8) — Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an …
    CVE-2004-1775 (CVSS 5) — Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 an…
    CVE-2004-0551 (CVSS 5) — Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows r…
    CVE-2003-1002 (CVSS 5) — Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers t…
    CVE-2003-1001 (CVSS 5) — Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices al…
    CVE-2003-0216 (CVSS 9.3) — Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to …

    References

    http://secunia.com/advisories/21896
    http://secunia.com/advisories/21902
    http://securitytracker.com/id?1016843
    http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml
    http://www.kb.cert.org/vuls/id/175148
    http://www.osvdb.org/28776
    http://www.phenoelit.de/stuff/CiscoVTP.txt
    http://www.securityfocus.com/archive/1/445896/100/0/threaded
    http://www.securityfocus.com/archive/1/445938/100/0/threaded
    http://www.securityfocus.com/bid/19998
    http://www.vupen.com/english/advisories/2006/3600
    https://exchange.xforce.ibmcloud.com/vulnerabilities/28925
    http://secunia.com/advisories/21896
    http://secunia.com/advisories/21902
    http://securitytracker.com/id?1016843
    http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml
    http://www.kb.cert.org/vuls/id/175148
    http://www.osvdb.org/28776
    http://www.phenoelit.de/stuff/CiscoVTP.txt
    http://www.securityfocus.com/archive/1/445896/100/0/threaded
    http://www.securityfocus.com/archive/1/445938/100/0/threaded
    http://www.securityfocus.com/bid/19998
    http://www.vupen.com/english/advisories/2006/3600
    https://exchange.xforce.ibmcloud.com/vulnerabilities/28925

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High