Vulnerability Details CVE-2006-2224
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.202
EPSS Ranking 95.2%
CVSS Severity
CVSS v2 Score 5.0
References
- ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
- http://bugzilla.quagga.net/show_bug.cgi?id=262
- http://secunia.com/advisories/19910
- http://secunia.com/advisories/20137
- http://secunia.com/advisories/20138
- http://secunia.com/advisories/20221
- http://secunia.com/advisories/20420
- http://secunia.com/advisories/20421
- http://secunia.com/advisories/20782
- http://secunia.com/advisories/21159
- http://securitytracker.com/id?1016204
- http://www.debian.org/security/2006/dsa-1059
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml
- http://www.novell.com/linux/security/advisories/2006_17_sr.html
- http://www.osvdb.org/25225
- http://www.redhat.com/support/errata/RHSA-2006-0525.html
- http://www.redhat.com/support/errata/RHSA-2006-0533.html
- http://www.securityfocus.com/archive/1/432823/100/0/threaded
- http://www.securityfocus.com/archive/1/432856/100/0/threaded
- http://www.securityfocus.com/bid/17808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26251
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775
- https://usn.ubuntu.com/284-1/
- ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
- http://bugzilla.quagga.net/show_bug.cgi?id=262
- http://secunia.com/advisories/19910
- http://secunia.com/advisories/20137
- http://secunia.com/advisories/20138
- http://secunia.com/advisories/20221
- http://secunia.com/advisories/20420
- http://secunia.com/advisories/20421
- http://secunia.com/advisories/20782
- http://secunia.com/advisories/21159
- http://securitytracker.com/id?1016204
- http://www.debian.org/security/2006/dsa-1059
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml
- http://www.novell.com/linux/security/advisories/2006_17_sr.html
- http://www.osvdb.org/25225
- http://www.redhat.com/support/errata/RHSA-2006-0525.html
- http://www.redhat.com/support/errata/RHSA-2006-0533.html
- http://www.securityfocus.com/archive/1/432823/100/0/threaded
- http://www.securityfocus.com/archive/1/432856/100/0/threaded
- http://www.securityfocus.com/bid/17808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26251
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775
- https://usn.ubuntu.com/284-1/
Products affected by CVE-2006-2224
-
cpe:2.3:a:quagga:quagga_routing_software_suite:*
-
cpe:2.3:a:quagga:quagga_routing_software_suite:0.95
-
cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.2
-
cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.3
-
cpe:2.3:a:quagga:quagga_routing_software_suite:0.98.5