PT-2006-6144 · Xorp · Xorp

Publicado 2006-10-20 · Atualizado 2017-07-20 · CVE-2006-5425

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions XORP (eXtensible Open Router Platform) versions 1.2 through 1.3

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field.

Recommendations For XORP (eXtensible Open Router Platform) versions 1.2 through 1.3, consider restricting or validating OSPF LSA packets to prevent the application crash until a fix is available.

Correção

Identificadores relacionados

CVE-2006-5425

Produtos afetados

Xorp

Referências · 9

• http://secunia.com/advisories/22462 · Aviso do Fabricante
• http://xorp.org/advisories/XORP_SA_06:01.ospf.txt · Aviso do Fabricante
• http://securitytracker.com/id?1017079 · Correção
• http://vupen.com/english/advisories/2006/4107 · Nota
• http://marc.info/?l=full-disclosure&m=116115975806681&w=2 · Nota
• http://securityfocus.com/bid/20597 · Nota
• http://labs.musecurity.com/advisories/MU-200610-01.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5425 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29658 · Nota