Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Производитель ПО
Наименование ПО
Cisco IOS
(IOS)
Описание
Протокол VLAN Trunking Protocol (VTP) в Cisco IOS позволяет злоумышленникам, действующим удаленно, вызвать отказ в обслуживании, если отправить фрейм VTP version 1 summary со значением 2 поля VTP version.
Как исправить
Используйте рекомендации производителя:
http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20060913-vtp
http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20060913-vtp
Ссылки
BUGTRAQ (20060913 Cisco IOS VTP issues): http://www.securityfocus.com/archive/1/archive/1/445896/100/0/threaded
BUGTRAQ (20060913 Re: Cisco IOS VTP issues): http://www.securityfocus.com/archive/1/archive/1/445938/100/0/threaded
CISCO (20060913 Cisco Security Response: Cisco VLAN Trunking Protocol Vulnerabilities): http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20060913-vtp
BID (19998): http://www.securityfocus.com/bid/19998
FRSIRT (ADV-2006-3600): http://www.frsirt.com/english/advisories/2006/3600
http://www.phenoelit.de/stuff/CiscoVTP.txt
SECTRACK (1016843): http://securitytracker.com/id?1016843
XF (cisco-ios-vtp-version-dos(28924)): http://xforce.iss.net/xforce/xfdb/28924
CERT-VN (VU#821420): http://www.kb.cert.org/vuls/id/821420
OSVDB (28775): http://www.osvdb.org/28775
BUGTRAQ (20060913 Re: Cisco IOS VTP issues): http://www.securityfocus.com/archive/1/archive/1/445938/100/0/threaded
CISCO (20060913 Cisco Security Response: Cisco VLAN Trunking Protocol Vulnerabilities): http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20060913-vtp
BID (19998): http://www.securityfocus.com/bid/19998
FRSIRT (ADV-2006-3600): http://www.frsirt.com/english/advisories/2006/3600
http://www.phenoelit.de/stuff/CiscoVTP.txt
SECTRACK (1016843): http://securitytracker.com/id?1016843
XF (cisco-ios-vtp-version-dos(28924)): http://xforce.iss.net/xforce/xfdb/28924
CERT-VN (VU#821420): http://www.kb.cert.org/vuls/id/821420
OSVDB (28775): http://www.osvdb.org/28775
