Konstantin V. Gavrilenko

Name of the Vulnerable Software and Affected Versions: Quagga versions 0.98 and 0.99 before 20060503 Quagga versions prior to 0.98.6-r1 Description: The issue concerns the improper implementation of configurations in RIPd, specifically regarding the disabling of RIPv1 or the requirement of plaintext or MD5 authentication. This allows remote attackers to obtain sensitive routing state information via REQUEST packets, such as SEND UPDATE. Multiple vulnerabilities in the Quagga package can lead to a breach of protected information, and exploitation can be carried out remotely. Recommendations: For Quagga versions 0.98 and 0.99 before 20060503, update to a version after 20060503 to resolve the issue. For Quagga versions prior to 0.98.6-r1, update to version 0.98.6-r1 or later to fix the vulnerabilities. As a temporary workaround, consider restricting access to the RIPd configuration to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Quagga versions prior to 0.98.6-r1 Quagga version 0.99 before 20060503 Description: The issue concerns the RIPd component in Quagga, which fails to properly enforce RIPv2 authentication requirements. This allows remote attackers to modify routing state via RIPv1 RESPONSE packets. Multiple vulnerabilities in the Quagga package can lead to a breach of protected information, and these vulnerabilities can be exploited remotely. Recommendations: For Quagga versions prior to 0.98.6-r1, update to version 0.98.6-r1 or later to resolve the issue. For Quagga version 0.99 before 20060503, update to a version released after 20060503 to address the problem. As a temporary workaround, consider restricting access to the RIPd component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Cisco IOS versions after 12.3(2), 12.3(3)B, and 12.3(2)T Extended Interior Gateway Routing Protocol (EIGRP) version 1.2 **Description** The issue allows remote attackers to cause a denial of service by sending a spoofed neighbor announcement with either mismatched k values or a goodbye message Type-Length-Value (TLV). **Recommendations** For Cisco IOS versions after 12.3(2), 12.3(3)B, and 12.3(2)T, consider restricting access to the EIGRP protocol to minimize the risk of exploitation. For Extended Interior Gateway Routing Protocol (EIGRP) version 1.2, avoid using the protocol until the issue is resolved or apply configuration changes to prevent spoofed neighbor announcements. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BT Voyager 2000 Wireless ADSL Router (affected versions not specified) **Description** The issue allows remote attackers to obtain sensitive information, including passwords stored in plaintext, due to a default public SNMP community name. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.