Description
Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages.
References
- 1014135 vdb-entry
- 20050608 Cisco 802.1x Voice-Enabled Interfaces Allow Anonymous Voice VLAN Access vendor-advisory
- http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+802.1x+Advisory.pdf
- 20050610 Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces Vulnerability Discovery: FishNet Security mailing-list
- cisco-callmanager-voice-gain-access(20939) vdb-entry