Description
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context.
References
- http://www.phenoelit.de/stuff/CiscoVTP.txt
- 21896 third-party-advisory
- 19998 vdb-entry
- 28776 vdb-entry
- 20060913 Cisco VLAN Trunking Protocol Vulnerabilities vendor-advisory
- 1016843 vdb-entry
- 20060913 Re: Cisco IOS VTP issues mailing-list
- ADV-2006-3600 vdb-entry
- cisco-ios-vtp-wrap-config-manipulation(28925) vdb-entry
- VU#175148 third-party-advisory
- 20060913 Cisco IOS VTP issues mailing-list
- 21902 third-party-advisory