Description
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.novell.com/linux/security/advisories/2006_17_sr.html ↗
- https://usn.ubuntu.com/284-1/ ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26251 ↗
- http://secunia.com/advisories/20782 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775 ↗
- http://secunia.com/advisories/20138 ↗
- http://www.securityfocus.com/archive/1/432823/100/0/threaded ↗
- http://secunia.com/advisories/20421 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0525.html ↗
- http://www.osvdb.org/25225 ↗
- http://secunia.com/advisories/20137 ↗
- http://securitytracker.com/id?1016204 ↗
- http://secunia.com/advisories/19910 ↗
- http://www.securityfocus.com/bid/17808 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0533.html ↗
- http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml ↗
- http://secunia.com/advisories/21159 ↗
- http://www.securityfocus.com/archive/1/432856/100/0/threaded ↗
- http://bugzilla.quagga.net/show_bug.cgi?id=262 ↗
- http://www.debian.org/security/2006/dsa-1059 ↗
- http://secunia.com/advisories/20221 ↗
- http://secunia.com/advisories/20420 ↗