CVE-2006-4776

Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement.

• CWE-119

• http://secunia.com/advisories/21896Vendor Advisory
• http://securitytracker.com/id?1016843
• http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtmlPatch
• http://www.kb.cert.org/vuls/id/542108US Government Resource
• http://www.osvdb.org/28777
• http://www.phenoelit.de/stuff/CiscoVTP.txt
• http://www.securityfocus.com/archive/1/445896/100/0/threaded
• http://www.securityfocus.com/archive/1/445938/100/0/threaded
• http://www.securityfocus.com/bid/19998
• http://www.vupen.com/english/advisories/2006/3600Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3601Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28927
• http://secunia.com/advisories/21896Vendor Advisory
• http://securitytracker.com/id?1016843
• http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtmlPatch
• http://www.kb.cert.org/vuls/id/542108US Government Resource
• http://www.osvdb.org/28777
• http://www.phenoelit.de/stuff/CiscoVTP.txt
• http://www.securityfocus.com/archive/1/445896/100/0/threaded
• http://www.securityfocus.com/archive/1/445938/100/0/threaded
• http://www.securityfocus.com/bid/19998
• http://www.vupen.com/english/advisories/2006/3600Vendor Advisory
• http://www.vupen.com/english/advisories/2006/3601Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28927

Published

Sep 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4770PHP remote file inclusion vulnerability in menu.php in MiniP…
• CVE-2006-4771Cross-site scripting (XSS) vulnerability in haut.php in Foru…
• CVE-2006-4772HotPlug CMS stores sensitive information under the web root …
• CVE-2006-4773Sun StorEdge 6130 Array Controllers with firmware 06.12.10.1…
• CVE-2006-4774The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(1…
• CVE-2006-4775The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(1…
• CVE-2006-4777Heap-based buffer overflow in the DirectAnimation Path Contr…
• CVE-2006-4778SQL injection vulnerability in Creative Commons Tools ccHost…
• CVE-2006-4779PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-4780PHP remote file inclusion vulnerability in includes/function…
• CVE-2006-4781Heap-based buffer overflow in FutureSoft TFTP Server Multith…
• CVE-2006-4782src/index.php in WebSPELL 4.01.01 and earlier, when register…