CVE-2005-4826 - Vulnerability Details - OpenCVE

Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cisco	Ios

Configuration 1 [-]

cpe:2.3:o:cisco:ios:12.1\(22\)ea3:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/33013
http://secunia.com/advisories/23892
http://securitytracker.com/id?1017568
http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta
http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html
http://www.s21sec.com/en/avisos/s21sec-034-en.txt
http://www.securityfocus.com/archive/1/458240/100/0/threaded
http://www.securityfocus.com/archive/1/458554/100/0/threaded
http://www.securityfocus.com/bid/22268
http://www.vupen.com/english/advisories/2007/0414
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-01-31T11:00:00

Updated: 2024-08-08T00:01:23.434Z

Reserved: 2007-01-30T00:00:00

Link: CVE-2005-4826

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-4826

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-03-01T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1017568", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017568"}, {"name": "23892", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23892"}, {"name": "33013", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/33013"}, {"name": "20070129 Cisco VTP Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html"}, {"name": "ADV-2007-0414", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0414"}, {"name": "oval:org.mitre.oval:def:5544", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544"}, {"name": "20070130 Re: [Full-disclosure] S21sec-034-en: Cisco VTP DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta"}, {"name": "22268", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22268"}, {"tags": ["x_refsource_MISC"], "url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt"}, {"name": "20070126 S21sec-034-en: Cisco VTP DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-4826", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1017568", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017568"}, {"name": "23892", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23892"}, {"name": "33013", "refsource": "OSVDB", "url": "http://osvdb.org/33013"}, {"name": "20070129 Cisco VTP Vulnerability", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html"}, {"name": "ADV-2007-0414", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0414"}, {"name": "oval:org.mitre.oval:def:5544", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544"}, {"name": "20070130 Re: [Full-disclosure] S21sec-034-en: Cisco VTP DoS vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded"}, {"name": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta", "refsource": "MISC", "url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta"}, {"name": "22268", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22268"}, {"name": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt", "refsource": "MISC", "url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt"}, {"name": "20070126 S21sec-034-en: Cisco VTP DoS vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T00:01:23.434Z"}, "title": "CVE Program Container", "references": [{"name": "1017568", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017568"}, {"name": "23892", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23892"}, {"name": "33013", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/33013"}, {"name": "20070129 Cisco VTP Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html"}, {"name": "ADV-2007-0414", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0414"}, {"name": "oval:org.mitre.oval:def:5544", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544"}, {"name": "20070130 Re: [Full-disclosure] S21sec-034-en: Cisco VTP DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta"}, {"name": "22268", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22268"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt"}, {"name": "20070126 S21sec-034-en: Cisco VTP DoS vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-4826", "datePublished": "2007-01-31T11:00:00", "dateReserved": "2007-01-30T00:00:00", "dateUpdated": "2024-08-08T00:01:23.434Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea3:*:*:*:*:*:*:*", "matchCriteriaId": "AB440BC6-9FC8-4EFD-B05E-3F5A5A68F8EF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776."}], "id": "CVE-2005-4826", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/33013"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/23892"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017568"}, {"source": "cve@mitre.org", "url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta"}, {"source": "cve@mitre.org", "url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22268"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0414"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/33013"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/23892"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1017568"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/22268"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0414"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}