PT-2006-6144 · Xorp · Xorp

Published 2006-10-20 · Updated 2017-07-20 · CVE-2006-5425

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions XORP (eXtensible Open Router Platform) versions 1.2 through 1.3

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by sending an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field.

Recommendations For XORP (eXtensible Open Router Platform) versions 1.2 through 1.3, consider restricting or validating OSPF LSA packets to prevent the application crash until a fix is available.

Fix

Related Identifiers

CVE-2006-5425

Affected Products

Xorp

References · 9

• http://secunia.com/advisories/22462 · Vendor Advisory
• http://xorp.org/advisories/XORP_SA_06:01.ospf.txt · Vendor Advisory
• http://securitytracker.com/id?1017079 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5425 · Security Note
• http://vupen.com/english/advisories/2006/4107 · Note
• http://marc.info/?l=full-disclosure&m=116115975806681&w=2 · Note
• http://securityfocus.com/bid/20597 · Note
• http://labs.musecurity.com/advisories/MU-200610-01.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29658 · Note