Published: 10/05/2006 Updated: 03/10/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

bgpd in Quagga 0.98 and 0.99 prior to 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quagga quagga 0.98.5
quagga quagga 0.99.3

Paul Jakma discovered that Quagga’s ripd daemon did not properly handle authentication of RIPv1 requests If the RIPv1 protocol had been disabled, or authentication for RIPv2 had been enabled, ripd still replied to RIPv1 requests, which could lead to information disclosure (CVE-2006-2223) ...

Debian Bug report logs - #366980 CVE-2006-2276: bgpd denial of service in bgpd telnet interface Package: quagga; Maintainer for quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Source for quagga is src:quagga (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Fri, 12 May 2006 16:18:11 UTC ...

Debian Bug report logs - #365940 SECURITY: Quagga RIPD unauthenticated route injection Package: quagga; Maintainer for quagga is Brett Parker <iDunno@sommitrealweirdcouk>; Source for quagga is src:quagga (PTS, buildd, popcon) Reported by: Christian Hammers <ch@debianorg> Date: Wed, 3 May 2006 20:48:31 UTC Severi ...

Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-2223 Remote attackers may obtain sensitive information via RIPv1 REQUEST packets even if the quagga has been configured to use MD5 authenticati ...

CWE-399 http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html http://www.quagga.net/news2.php?y=2006&m=5&d=4#id1146764580 http://www.osvdb.org/25245 http://www.securityfocus.com/bid/17979 http://secunia.com/advisories/20116 http://secunia.com/advisories/20137 http://www.debian.org/security/2006/dsa-1059 http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml http://secunia.com/advisories/20138 http://secunia.com/advisories/20221 http://www.redhat.com/support/errata/RHSA-2006-0525.html http://www.redhat.com/support/errata/RHSA-2006-0533.html http://securitytracker.com/id?1016204 http://secunia.com/advisories/20420 http://secunia.com/advisories/20421 ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc http://secunia.com/advisories/20782 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651 https://usn.ubuntu.com/284-1/https://usn.ubuntu.com/284-1/https://nvd.nist.gov

CVE-2006-2276

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect