CVE-2006-2223

MEDIUM 5.0CVE-2006-2223 · Published 05/05/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
quagga quagga	`= 0.98.5= 0.99.3`	No fix yet

Description

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.

References

patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
bugzilla.quagga.net/show_bug.cgi
secunia.com/advisories/19910 · Patch
secunia.com/advisories/20137 · Vendor Advisory
secunia.com/advisories/20138 · Vendor Advisory
secunia.com/advisories/20221 · Vendor Advisory
secunia.com/advisories/20420 · Vendor Advisory
secunia.com/advisories/20421 · Vendor Advisory
secunia.com/advisories/20782 · Vendor Advisory
secunia.com/advisories/21159 · Vendor Advisory
securitytracker.com/id
debian.org/security/2006/dsa-1059
gentoo.org/security/en/glsa/glsa-200605-15.xml
novell.com/linux/security/advisories/2006_17_sr.html
osvdb.org/25224
redhat.com/support/errata/RHSA-2006-0525.html
redhat.com/support/errata/RHSA-2006-0533.html
securityfocus.com/archive/1/432822/100/0/threaded
securityfocus.com/archive/1/432823/100/0/threaded
securityfocus.com/bid/17808 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/26243
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985
usn.ubuntu.com/284-1

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free