PT-2006-1053 · Quagga+1 · Quagga+1

Fredrik Widell · Published 2006-05-09 · Updated 2018-10-03 · CVE-2006-2276

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Quagga versions 0.98 through 0.99 Quagga version 0.98.6 and earlier

Description: The issue allows local users to cause a denial of service via a certain command. Additionally, multiple vulnerabilities in the Quagga package can lead to a breach of protected information, and these can be exploited remotely.

Recommendations: For Quagga versions 0.98 through 0.99, consider restricting access to the telnet interface to minimize the risk of exploitation. For Quagga version 0.98.6 and earlier, update to a version later than 0.98.6 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for some versions.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

CWE-399

Related Identifiers

BDU:2015-09507

CVE-2006-2276

DSA-1059-1

RHSA-2006:0525

RHSA-2006_0525

Affected Products

Quagga

Red Hat

References · 28

• 🔥 http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html · Exploit
• 🔥 http://osvdb.org/25245 · Exploit
• http://debian.org/security/2006/dsa-1059 · Vendor Advisory
• http://secunia.com/advisories/20421 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0533.html · Vendor Advisory
• http://secunia.com/advisories/20782 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200605-15.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09507 · Security Note
• http://secunia.com/advisories/20137 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc · Vendor Advisory
• http://secunia.com/advisories/20116 · Vendor Advisory
• http://secunia.com/advisories/20138 · Vendor Advisory
• http://quagga.net/news2.php?y=2006&m=5&d=4#id1146764580 · Patch
• http://redhat.com/support/errata/RHSA-2006-0525.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2276 · Security Note