|
Cisco IOS VTP Denial of Service Vulnerability
|
|
Secunia Advisory:
|
SA23892
|
|
|
Release Date:
|
2007-01-30
|
|
Popularity:
|
11,014 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
DoS
|
|
Where:
|
From local network
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Cisco IOS 12.x
Cisco IOS R12.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
David Barroso Berrueta and Alfredo Andres Omella have reported a vulnerability in Cisco IOS, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an unspecified error when handling certain malformed VLAN Trunking Protocol (VTP) packets. This can be exploited to cause a device to reload by sending a specially crafted VTP packet.
Successful exploitation requires knowledge of the VTP domain name and the port that is configured for trunking.
The vulnerability is reported in the following devices:
* Cisco 2900XL Series Switches
* Cisco 2950 Series Switches
* Cisco 2955 Series Switches
* Cisco 3500XL Series Switches
* Cisco 3550 Series Switches
* Cisco 3570 Series Switches
Solution:
The vendor recommends allowing only trusted devices to connect to ports configured for ISL or 802.1q trunking.
Provided and/or discovered by:
Alfredo Andres Omella and David Barroso Berrueta, S21SEC
Original Advisory:
Cisco Advisory:
http://www.cisco.com/en/US/products/p...ecurity_response09186a00807d1a81.html
21SEC Advisory:
http://www.s21sec.com/es/avisos/s21sec-034-en.txt
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
