CVEvulnerability
CVE-2006-2223
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.
Affected configurations
• quagga quagga 0.98.5
• quagga quagga 0.99.3
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc patches.sgi.com
- http://bugzilla.quagga.net/show_bug.cgi?id=261 bugzilla.quagga.net
- http://secunia.com/advisories/19910 Patch, Vendor Advisory
- http://secunia.com/advisories/20137 Vendor Advisory
- http://secunia.com/advisories/20138 Vendor Advisory
- http://secunia.com/advisories/20221 Vendor Advisory
- http://secunia.com/advisories/20420 Vendor Advisory
- http://secunia.com/advisories/20421 Vendor Advisory
- http://secunia.com/advisories/20782 Vendor Advisory
- http://secunia.com/advisories/21159 Vendor Advisory
- http://securitytracker.com/id?1016204 securitytracker.com
- http://www.debian.org/security/2006/dsa-1059 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml www.gentoo.org
- http://www.novell.com/linux/security/advisories/2006_17_sr.html www.novell.com
- http://www.osvdb.org/25224 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0525.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0533.html www.redhat.com
- http://www.securityfocus.com/archive/1/432822/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/432823/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17808 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26243 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985 oval.cisecurity.org
- https://usn.ubuntu.com/284-1/ usn.ubuntu.com
- ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc patches.sgi.com
- http://bugzilla.quagga.net/show_bug.cgi?id=261 bugzilla.quagga.net
- http://secunia.com/advisories/19910 Patch, Vendor Advisory
- http://secunia.com/advisories/20137 Vendor Advisory
- http://secunia.com/advisories/20138 Vendor Advisory
- http://secunia.com/advisories/20221 Vendor Advisory
- http://secunia.com/advisories/20420 Vendor Advisory
- http://secunia.com/advisories/20421 Vendor Advisory
- http://secunia.com/advisories/20782 Vendor Advisory
- http://secunia.com/advisories/21159 Vendor Advisory
- http://securitytracker.com/id?1016204 securitytracker.com
- http://www.debian.org/security/2006/dsa-1059 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml www.gentoo.org
- http://www.novell.com/linux/security/advisories/2006_17_sr.html www.novell.com
- http://www.osvdb.org/25224 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0525.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0533.html www.redhat.com
- http://www.securityfocus.com/archive/1/432822/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/432823/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17808 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26243 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985 oval.cisecurity.org
- https://usn.ubuntu.com/284-1/ usn.ubuntu.com