Description
Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement.
References
- VU#542108 third-party-advisory
- ADV-2006-3601 vdb-entry
- http://www.phenoelit.de/stuff/CiscoVTP.txt
- 21896 third-party-advisory
- 19998 vdb-entry
- 20060913 Cisco VLAN Trunking Protocol Vulnerabilities vendor-advisory
- 1016843 vdb-entry
- 20060913 Re: Cisco IOS VTP issues mailing-list
- 28777 vdb-entry
- cisco-ios-vtp-vlan-name-bo(28927) vdb-entry
- ADV-2006-3600 vdb-entry
- 20060913 Cisco IOS VTP issues mailing-list