CVE-2006-2224

Description (CNA)

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.novell.com/linux/security/advisories/2006_17_sr.html
• https://usn.ubuntu.com/284-1/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26251
• http://secunia.com/advisories/20782
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775
• http://secunia.com/advisories/20138
• http://www.securityfocus.com/archive/1/432823/100/0/threaded
• http://secunia.com/advisories/20421
• http://www.redhat.com/support/errata/RHSA-2006-0525.html
• http://www.osvdb.org/25225
• http://secunia.com/advisories/20137
• http://securitytracker.com/id?1016204
• http://secunia.com/advisories/19910
• http://www.securityfocus.com/bid/17808
• http://www.redhat.com/support/errata/RHSA-2006-0533.html
• http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml
• http://secunia.com/advisories/21159
• http://www.securityfocus.com/archive/1/432856/100/0/threaded
• http://bugzilla.quagga.net/show_bug.cgi?id=262
• http://www.debian.org/security/2006/dsa-1059
• http://secunia.com/advisories/20221
• http://secunia.com/advisories/20420

ADP enrichment