ByteOS Network

Vulnerability Details :

CVE-2006-2224

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-05 May, 2006 | 19:00

Updated At-07 Aug, 2024 | 17:43

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:05 May, 2006 | 19:00

Updated At:07 Aug, 2024 | 17:43

▼CVE Numbering Authority (CNA)

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.novell.com/linux/security/advisories/2006_17_sr.html	vendor-advisory x_refsource_SUSE
https://usn.ubuntu.com/284-1/	vendor-advisory x_refsource_UBUNTU
https://exchange.xforce.ibmcloud.com/vulnerabilities/26251	vdb-entry x_refsource_XF
http://secunia.com/advisories/20782	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/20138	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/432823/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/20421	third-party-advisory x_refsource_SECUNIA
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc	vendor-advisory x_refsource_SGI
http://www.redhat.com/support/errata/RHSA-2006-0525.html	vendor-advisory x_refsource_REDHAT
http://www.osvdb.org/25225	vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/20137	third-party-advisory x_refsource_SECUNIA
http://securitytracker.com/id?1016204	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/19910	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/17808	vdb-entry x_refsource_BID
http://www.redhat.com/support/errata/RHSA-2006-0533.html	vendor-advisory x_refsource_REDHAT
http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/21159	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/432856/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://bugzilla.quagga.net/show_bug.cgi?id=262	x_refsource_CONFIRM
http://www.debian.org/security/2006/dsa-1059	vendor-advisory x_refsource_DEBIAN
http://secunia.com/advisories/20221	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/20420	third-party-advisory x_refsource_SECUNIA

Hyperlink: http://www.novell.com/linux/security/advisories/2006_17_sr.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://usn.ubuntu.com/284-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/26251

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://secunia.com/advisories/20782

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/20138

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/432823/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/20421

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc

Resource:

vendor-advisory

x_refsource_SGI

Hyperlink: http://www.redhat.com/support/errata/RHSA-2006-0525.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.osvdb.org/25225

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://secunia.com/advisories/20137

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://securitytracker.com/id?1016204

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/19910

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/bid/17808

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.redhat.com/support/errata/RHSA-2006-0533.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://secunia.com/advisories/21159

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/432856/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://bugzilla.quagga.net/show_bug.cgi?id=262

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2006/dsa-1059

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://secunia.com/advisories/20221

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/20420

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.novell.com/linux/security/advisories/2006_17_sr.html	vendor-advisory x_refsource_SUSE x_transferred
https://usn.ubuntu.com/284-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/26251	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/20782	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/20138	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/432823/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/20421	third-party-advisory x_refsource_SECUNIA x_transferred
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc	vendor-advisory x_refsource_SGI x_transferred
http://www.redhat.com/support/errata/RHSA-2006-0525.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.osvdb.org/25225	vdb-entry x_refsource_OSVDB x_transferred
http://secunia.com/advisories/20137	third-party-advisory x_refsource_SECUNIA x_transferred
http://securitytracker.com/id?1016204	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/19910	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/bid/17808	vdb-entry x_refsource_BID x_transferred
http://www.redhat.com/support/errata/RHSA-2006-0533.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/21159	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/432856/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://bugzilla.quagga.net/show_bug.cgi?id=262	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2006/dsa-1059	vendor-advisory x_refsource_DEBIAN x_transferred
http://secunia.com/advisories/20221	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/20420	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://www.novell.com/linux/security/advisories/2006_17_sr.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://usn.ubuntu.com/284-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/26251

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://secunia.com/advisories/20782

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://secunia.com/advisories/20138

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/432823/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://secunia.com/advisories/20421

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc

Resource:

vendor-advisory

x_refsource_SGI

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2006-0525.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.osvdb.org/25225

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://secunia.com/advisories/20137

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://securitytracker.com/id?1016204

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://secunia.com/advisories/19910

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/17808

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2006-0533.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://secunia.com/advisories/21159

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/432856/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://bugzilla.quagga.net/show_bug.cgi?id=262

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.debian.org/security/2006/dsa-1059

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://secunia.com/advisories/20221

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/20420

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:05 May, 2006 | 19:02

Updated At:03 Apr, 2025 | 01:03

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

CWE ID: CWE-287

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc	cve@mitre.org	N/A
http://bugzilla.quagga.net/show_bug.cgi?id=262	cve@mitre.org	Patch
http://secunia.com/advisories/19910	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/20137	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/20138	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/20221	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/20420	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/20421	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/20782	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/21159	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1016204	cve@mitre.org	N/A
http://www.debian.org/security/2006/dsa-1059	cve@mitre.org	N/A
http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml	cve@mitre.org	N/A
http://www.novell.com/linux/security/advisories/2006_17_sr.html	cve@mitre.org	N/A
http://www.osvdb.org/25225	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2006-0525.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2006-0533.html	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/432823/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/archive/1/432856/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/17808	cve@mitre.org	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/26251	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775	cve@mitre.org	N/A
https://usn.ubuntu.com/284-1/	cve@mitre.org	N/A
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc	af854a3a-2127-422b-91ae-364da2661108	N/A
http://bugzilla.quagga.net/show_bug.cgi?id=262	af854a3a-2127-422b-91ae-364da2661108	Patch
http://secunia.com/advisories/19910	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://secunia.com/advisories/20137	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/20138	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/20221	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/20420	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/20421	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/20782	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/21159	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1016204	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2006/dsa-1059	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.novell.com/linux/security/advisories/2006_17_sr.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.osvdb.org/25225	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2006-0525.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2006-0533.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/432823/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/432856/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/17808	af854a3a-2127-422b-91ae-364da2661108	Exploit Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/26251	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775	af854a3a-2127-422b-91ae-364da2661108	N/A
https://usn.ubuntu.com/284-1/	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://bugzilla.quagga.net/show_bug.cgi?id=262

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://secunia.com/advisories/19910

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://secunia.com/advisories/20137

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/20138

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/20221

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/20420

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/20421

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/20782

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/21159

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1016204

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2006/dsa-1059

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.novell.com/linux/security/advisories/2006_17_sr.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.osvdb.org/25225

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2006-0525.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2006-0533.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/432823/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/432856/100/0/threaded

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/17808

Source: cve@mitre.org

Resource:

Exploit

Patch

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/26251

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://usn.ubuntu.com/284-1/

Source: cve@mitre.org

Resource: N/A

Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc