CVEvulnerability
CVE-2006-2224
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-287
Description
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Affected configurations
• quagga quagga routing software suite (<= 0.99.3)
• quagga quagga routing software suite 0.95
• quagga quagga routing software suite 0.96.2
• quagga quagga routing software suite 0.96.3
• quagga quagga routing software suite 0.98.5
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc patches.sgi.com
- http://bugzilla.quagga.net/show_bug.cgi?id=262 Patch
- http://secunia.com/advisories/19910 Patch, Vendor Advisory
- http://secunia.com/advisories/20137 Vendor Advisory
- http://secunia.com/advisories/20138 Vendor Advisory
- http://secunia.com/advisories/20221 Vendor Advisory
- http://secunia.com/advisories/20420 Vendor Advisory
- http://secunia.com/advisories/20421 Vendor Advisory
- http://secunia.com/advisories/20782 Vendor Advisory
- http://secunia.com/advisories/21159 Vendor Advisory
- http://securitytracker.com/id?1016204 securitytracker.com
- http://www.debian.org/security/2006/dsa-1059 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml www.gentoo.org
- http://www.novell.com/linux/security/advisories/2006_17_sr.html www.novell.com
- http://www.osvdb.org/25225 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0525.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0533.html www.redhat.com
- http://www.securityfocus.com/archive/1/432823/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/432856/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17808 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26251 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775 oval.cisecurity.org
- https://usn.ubuntu.com/284-1/ usn.ubuntu.com
- ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc patches.sgi.com
- http://bugzilla.quagga.net/show_bug.cgi?id=262 Patch
- http://secunia.com/advisories/19910 Patch, Vendor Advisory
- http://secunia.com/advisories/20137 Vendor Advisory
- http://secunia.com/advisories/20138 Vendor Advisory
- http://secunia.com/advisories/20221 Vendor Advisory
- http://secunia.com/advisories/20420 Vendor Advisory
- http://secunia.com/advisories/20421 Vendor Advisory
- http://secunia.com/advisories/20782 Vendor Advisory
- http://secunia.com/advisories/21159 Vendor Advisory
- http://securitytracker.com/id?1016204 securitytracker.com
- http://www.debian.org/security/2006/dsa-1059 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml www.gentoo.org
- http://www.novell.com/linux/security/advisories/2006_17_sr.html www.novell.com
- http://www.osvdb.org/25225 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2006-0525.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2006-0533.html www.redhat.com
- http://www.securityfocus.com/archive/1/432823/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/432856/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17808 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26251 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775 oval.cisecurity.org
- https://usn.ubuntu.com/284-1/ usn.ubuntu.com