CVE-2006-2224

Опубликовано: 05 мая 2006

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
http://bugzilla.quagga.net/show_bug.cgi?id=262
Patch
http://secunia.com/advisories/19910
Patch
Vendor Advisory
http://secunia.com/advisories/20137
Vendor Advisory
http://secunia.com/advisories/20138
Vendor Advisory
http://secunia.com/advisories/20221
Vendor Advisory
http://secunia.com/advisories/20420
Vendor Advisory
http://secunia.com/advisories/20421
Vendor Advisory
http://secunia.com/advisories/20782
Vendor Advisory
http://secunia.com/advisories/21159
Vendor Advisory
http://securitytracker.com/id?1016204
http://www.debian.org/security/2006/dsa-1059
http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml
http://www.novell.com/linux/security/advisories/2006_17_sr.html
http://www.osvdb.org/25225
http://www.redhat.com/support/errata/RHSA-2006-0525.html
http://www.redhat.com/support/errata/RHSA-2006-0533.html
http://www.securityfocus.com/archive/1/432823/100/0/threaded
http://www.securityfocus.com/archive/1/432856/100/0/threaded
http://www.securityfocus.com/bid/17808
Exploit
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:quagga:quagga_routing_software_suite:*:*:*:*:*:*:*:*

Версия до 0.99.3 (включая)

cpe:2.3:a:quagga:quagga_routing_software_suite:0.95:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.2:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga_routing_software_suite:0.96.3:*:*:*:*:*:*:*

cpe:2.3:a:quagga:quagga_routing_software_suite:0.98.5:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.17928

Средний

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2006-2224

ubuntu

больше 19 лет назад

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

CVE-2006-2224

redhat

больше 19 лет назад

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

CVE-2006-2224

debian

больше 19 лет назад

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce ...

GHSA-mj28-wp87-qqjj

github

больше 3 лет назад

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

BDU:2015-09507

fstec

больше 19 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

EPSS

Процентиль: 95%

0.17928

Средний

5 Medium

CVSS2

Дефекты

CWE-287