PT-2008-6135 · Cisco · Catos+1

Publicado 2008-11-06 · Atualizado 2017-08-08 · CVE-2008-4963

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS and CatOS (affected versions not specified)

Description The issue is related to an unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in a device reload or hang. The attack is possible when the VTP operating mode is not set to transparent, and a crafted VTP packet is sent to a switch interface configured as a trunk port.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-4963

Produtos afetados

Catos

Cisco Ios

Referências · 8

• http://secunia.com/advisories/32573 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-4963 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_response09186a0080a231cf.html · Aviso do Fabricante
• http://securityfocus.com/bid/32120 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46346 · Nota
• http://securitytracker.com/id?1021143 · Nota
• http://securitytracker.com/id?1021144 · Nota
• http://osvdb.org/49601 · Nota