CVE-2006-2224

MEDIUM 5.0CVE-2006-2224 · Published 05/05/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
quagga routing software suite quagga	`= 0.95= 0.96.2= 0.96.3= 0.98.5≤ 0.99.3`	No fix yet

Description

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

References

patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
bugzilla.quagga.net/show_bug.cgi · Patch
secunia.com/advisories/19910 · Patch
secunia.com/advisories/20137 · Vendor Advisory
secunia.com/advisories/20138 · Vendor Advisory
secunia.com/advisories/20221 · Vendor Advisory
secunia.com/advisories/20420 · Vendor Advisory
secunia.com/advisories/20421 · Vendor Advisory
secunia.com/advisories/20782 · Vendor Advisory
secunia.com/advisories/21159 · Vendor Advisory
securitytracker.com/id
debian.org/security/2006/dsa-1059
gentoo.org/security/en/glsa/glsa-200605-15.xml
novell.com/linux/security/advisories/2006_17_sr.html
osvdb.org/25225
redhat.com/support/errata/RHSA-2006-0525.html
redhat.com/support/errata/RHSA-2006-0533.html
securityfocus.com/archive/1/432823/100/0/threaded
securityfocus.com/archive/1/432856/100/0/threaded
securityfocus.com/bid/17808 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/26251
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775
usn.ubuntu.com/284-1

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free