CVE-2005-4826

Severity: medium (CVSS 6.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-31 · updated 2026-06-16

Description

Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776.

Affected products

Cisco IOS: 12.1(22)ea3

References

http://osvdb.org/33013
http://secunia.com/advisories/23892
http://securitytracker.com/id?1017568
http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta
http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html
http://www.s21sec.com/en/avisos/s21sec-034-en.txt
http://www.securityfocus.com/archive/1/458240/100/0/threaded
http://www.securityfocus.com/archive/1/458554/100/0/threaded
http://www.securityfocus.com/bid/22268
http://www.vupen.com/english/advisories/2007/0414
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544
http://osvdb.org/33013

Get alerted when CVE-2005-4826 or the next vulnerability affects your stack