CVE-2006-2224

Description

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Affected products

• Quagga / quagga_routing_software_suite0.99.3
• Quagga / quagga_routing_software_suite0.95 – 0.95
• Quagga / quagga_routing_software_suite0.96.2 – 0.96.2
• Quagga / quagga_routing_software_suite0.96.3 – 0.96.3
• Quagga / quagga_routing_software_suite0.98.5 – 0.98.5

References

• VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2006_17_sr.html
• VENDOR_ADVISORYhttps://usn.ubuntu.com/284-1/
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/26251
• VENDOR_ADVISORYhttp://secunia.com/advisories/20782
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775
• VENDOR_ADVISORYhttp://secunia.com/advisories/20138
• MISChttp://www.securityfocus.com/archive/1/432823/100/0/threaded
• VENDOR_ADVISORYhttp://secunia.com/advisories/20421
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
• MISChttp://www.redhat.com/support/errata/RHSA-2006-0525.html
• MISChttp://www.osvdb.org/25225
• VENDOR_ADVISORYhttp://secunia.com/advisories/20137
• MISChttp://securitytracker.com/id?1016204
• VENDOR_ADVISORYhttp://secunia.com/advisories/19910
• MISChttp://www.securityfocus.com/bid/17808
• MISChttp://www.redhat.com/support/errata/RHSA-2006-0533.html
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200605-15.xml
• VENDOR_ADVISORYhttp://secunia.com/advisories/21159
• MISChttp://www.securityfocus.com/archive/1/432856/100/0/threaded
• MISChttp://bugzilla.quagga.net/show_bug.cgi?id=262
• VENDOR_ADVISORYhttp://www.debian.org/security/2006/dsa-1059
• VENDOR_ADVISORYhttp://secunia.com/advisories/20221
• VENDOR_ADVISORYhttp://secunia.com/advisories/20420