CVE-2006-2224

Description

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Affected products

• Quagga / quagga_routing_software_suite0.99.3
• Quagga / quagga_routing_software_suite0.95 – 0.95
• Quagga / quagga_routing_software_suite0.96.2 – 0.96.2
• Quagga / quagga_routing_software_suite0.96.3 – 0.96.3
• Quagga / quagga_routing_software_suite0.98.5 – 0.98.5

Exploits & proofs of concept

• exploit-dbQuagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injectionby Konstantin V. Gavrilenko

References

• VENDOR_ADVISORYhttp://www.novell.com/linux/security/advisories/2006_17_sr.html
• VENDOR_ADVISORYhttps://usn.ubuntu.com/284-1/
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/26251
• VENDOR_ADVISORYhttp://secunia.com/advisories/20782
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775
• VENDOR_ADVISORYhttp://secunia.com/advisories/20138
• MISChttp://www.securityfocus.com/archive/1/432823/100/0/threaded
• VENDOR_ADVISORYhttp://secunia.com/advisories/20421
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
• MISChttp://www.redhat.com/support/errata/RHSA-2006-0525.html
• MISChttp://www.osvdb.org/25225
• VENDOR_ADVISORYhttp://secunia.com/advisories/20137
• MISChttp://securitytracker.com/id?1016204
• VENDOR_ADVISORYhttp://secunia.com/advisories/19910
• MISChttp://www.securityfocus.com/bid/17808
• MISChttp://www.redhat.com/support/errata/RHSA-2006-0533.html
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200605-15.xml
• VENDOR_ADVISORYhttp://secunia.com/advisories/21159
• MISChttp://www.securityfocus.com/archive/1/432856/100/0/threaded
• MISChttp://bugzilla.quagga.net/show_bug.cgi?id=262
• VENDOR_ADVISORYhttp://www.debian.org/security/2006/dsa-1059
• VENDOR_ADVISORYhttp://secunia.com/advisories/20221
• VENDOR_ADVISORYhttp://secunia.com/advisories/20420