PT-2008-6135 · Cisco · Catos+1

Published 2008-11-06 · Updated 2017-08-08 · CVE-2008-4963

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS and CatOS (affected versions not specified)

Description The issue is related to an unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in a device reload or hang. The attack is possible when the VTP operating mode is not set to transparent, and a crafted VTP packet is sent to a switch interface configured as a trunk port.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-4963

Affected Products

Catos

Cisco Ios

References · 8

• http://secunia.com/advisories/32573 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4963 · Security Note
• http://cisco.com/en/US/products/products_security_response09186a0080a231cf.html · Vendor Advisory
• http://securityfocus.com/bid/32120 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46346 · Note
• http://securitytracker.com/id?1021143 · Note
• http://securitytracker.com/id?1021144 · Note
• http://osvdb.org/49601 · Note