CVE-2005-4441
Last modified
CVE-2005-4441 is a vulnerability of currently unknown severity. The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message with a target MAC address that is set to a gateway router, which causes the packet to be sent to the router, where the source MAC is modified, aka "Modification of the MAC spoofing PVLAN jumping attack," as demonstrated by pvlan.c.. EPSS estimates a 1.61% chance of exploitation in the next 30 days.
Description
The PVLAN protocol allows remote attackers to bypass network segmentation and spoof PVLAN traffic via a PVLAN message with a target MAC address that is set to a gateway router, which causes the packet to be sent to the router, where the source MAC is modified, aka "Modification of the MAC spoofing PVLAN jumping attack," as demonstrated by pvlan.c.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Pvlan Protocol | Pvlan Protocol | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-4441?
How severe is CVE-2005-4441?
How do I fix CVE-2005-4441?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-4435Cross-site scripting (XSS) vulnerability in index.php AbleDe…
- CVE-2005-4436Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as i…
- CVE-2005-4437MD5 Neighbor Authentication in Extended Interior Gateway Rou…
- CVE-2005-4438Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distr…
- CVE-2005-4439Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote atta…
- CVE-2005-4440The 802.1q VLAN protocol allows remote attackers to bypass n…
- CVE-2005-4442Untrusted search path vulnerability in OpenLDAP before 2.2.2…
- CVE-2005-4443Untrusted search path vulnerability in Gauche before 0.8.6-r…
- CVE-2005-4444Stack-based buffer overflow in the trace message functionali…
- CVE-2005-4445Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.3…
- CVE-2005-4446Cross-site scripting (XSS) vulnerability in index.asp in ASP…
- CVE-2005-4447SQL injection vulnerability in articles\articles_funcs.php i…
Are you affected by CVE-2005-4441?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST