{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:00:57Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20060913-CVE-2006-4775","slug":"cisco-sa-20060913-cve-2006-4775","vendor":"Cisco","title":"Cisco IOS VTP Integer Wrap Denial of Service Vulnerability","summary":"Cisco IOS and Cisco Catalyst OS contain an integer overflow vulnerability that could allow an authenticated, remote attacker to cause affected devices to stop processing configuration changes, possibly resulting in a denial of service (DoS) condition. This vulnerability exists due to an integer overflow error within the statistics counters.  An authenticated, remote attacker could exploit this vulnerability by sending a spoofed VTP summary packet to the affected device, causing the VTP statistics parameter to wrap to a negative number.  This condition could prevent the affected device from processing further configuration changes.  Under some circumstances, this could prevent the device from responding to further requests, resulting in a DoS condition. Cisco has confirmed this vulnerability in a security response and released updated software to correct it. To exploit this vulnerability, an attacker must have access to the local network to spoof the malicious request.  Additionally, VTP configurations that use an authentication password within the VTP domain will require the attacker to know the domain password to successfully exploit the vulnerability.  Only devices with valid VTP configurations are affected by this vulnerability.","severity":"Medium","published_at":"2006-09-13T20:09:29Z","updated_at":"2006-09-13T20:09:29Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20060913-CVE-2006-4775","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20060913-CVE-2006-4775/csaf/Cisco-SA-20060913-CVE-2006-4775.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0},"cves":[{"id":"CVE-2006-4775","kev":false}],"public_evidence":[{"product":{"name":"Cisco Catalyst Operating System (CatOS) Software","slug":"cisco-catalyst-operating-system-catos-software","vendor":"Cisco"},"cve":{"id":"CVE-2006-4775"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:50:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Catalyst Operating System (CatOS) Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2006-09-13T20:09:29Z","updated_at":"2006-09-13T20:09:29Z","advisory_updated_at":"2006-09-13T20:09:29Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20060913-CVE-2006-4775","row_display_order":1}]}