Red Hat Security AdvisoryRHSA-2006:0525
quagga security update
Released 2006-06-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 3 quagga-0.96.2-11.3E, quagga-0.96.2-11.3E.i386, quagga-0.96.2-11.3E.ia64 +1
- Red Hat Enterprise Linux AS version 4 quagga-0.98.3-2.4E, quagga-0.98.3-2.4E.i386, quagga-0.98.3-2.4E.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 quagga-0.98.3-2.4E, quagga-0.98.3-2.4E.i386, quagga-contrib-0.98.3-2.4E +3
- Red Hat Enterprise Linux ES version 3 quagga-0.96.2-11.3E, quagga-0.96.2-11.3E.i386, quagga-0.96.2-11.3E.ia64
- Red Hat Enterprise Linux ES version 4 quagga-0.98.3-2.4E, quagga-0.98.3-2.4E.i386, quagga-0.98.3-2.4E.ia64 +6
- Red Hat Enterprise Linux WS version 4 quagga-0.98.3-2.4E, quagga-0.98.3-2.4E.i386, quagga-0.98.3-2.4E.ia64 +6
Fixes 3 records
Priority LOW 36
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10597 · Published 2006-05-05 · Fixed CWE-287
Priority LOW 36
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.1154 · Published 2006-05-05 · Fixed CWE-20
Priority LOW 23
bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00541 · Published 2006-05-09 · Fixed CWE-399
THREATIST.IORead the docs