CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

10.36% chance of exploitation in the next 30 days, 96th percentile

Published

2006-05-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27802

Security advisories

• http://secunia.com/advisories/19910
• http://secunia.com/advisories/20137
• http://secunia.com/advisories/20138
• http://secunia.com/advisories/20221
• http://secunia.com/advisories/20420
• http://secunia.com/advisories/20421
• http://secunia.com/advisories/20782
• http://secunia.com/advisories/21159
• http://bugzilla.quagga.net/show_bug.cgi?id=262
• http://www.securityfocus.com/bid/17808
• http://www.redhat.com/support/errata/RHSA-2006-0525.html
• http://www.redhat.com/support/errata/RHSA-2006-0533.html
• https://usn.ubuntu.com/284-1

References

• CVE Record
• NVD entry