CVE-2006-2276

概要

参考情報

• patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
• lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html · Exploit
• secunia.com/advisories/20116 · Vendor Advisory
• secunia.com/advisories/20137 · Vendor Advisory
• secunia.com/advisories/20138 · Vendor Advisory
• secunia.com/advisories/20221 · Vendor Advisory
• secunia.com/advisories/20420
• secunia.com/advisories/20421 · Vendor Advisory
• secunia.com/advisories/20782 · Vendor Advisory
• securitytracker.com/id
• debian.org/security/2006/dsa-1059
• gentoo.org/security/en/glsa/glsa-200605-15.xml
• osvdb.org/25245 · Exploit
• quagga.net/news2.php · Patch
• redhat.com/support/errata/RHSA-2006-0525.html
• redhat.com/support/errata/RHSA-2006-0533.html
• securityfocus.com/bid/17979
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651
• usn.ubuntu.com/284-1

quagga のその他の脆弱性

• CVE-2021-44038高 7.8An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the n…
• CVE-2012-5521中 6.5quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal
• CVE-2018-5381高 7.5The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp…
• CVE-2018-5380中 4.3The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer va…
• CVE-2018-5379緊急 9.8The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clust…