Good summary, really nothing new here though. The vulnerabilities you are describing are more related to a switch port with dynamic trunking. This is far more serious then merely gaining access to the voice VLAN. The VLAN identifier being part of the CDP packet is a matter of convenience.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1892/965#965