CVE-1999-1129

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htmVendor Advisory
http://www.securityfocus.com/archive/1/26008Patch, Vendor Advisory
http://www.securityfocus.com/bid/615Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3294
http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htmVendor Advisory
http://www.securityfocus.com/archive/1/26008Patch, Vendor Advisory
http://www.securityfocus.com/bid/615Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3294

Timeline

Published: Sep 1, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-11305.0Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read CVE-1999-11325.0Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information CVE-1999-11485.0FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connec CVE-1999-11565.0BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-n CVE-1999-11575.0Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, CVE-1999-11637.5Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support CVE-1999-11645.0Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL header CVE-1999-11657.2GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privile CVE-1999-11667.2Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying CVE-1999-11676.4Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pa CVE-1999-11687.2install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of CVE-1999-11695.0nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.