Red Hat Security Advisory

RHSA-2006:0533

zebra security update

Released 2006-06-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS (Advanced Server) version 2.1
Red Hat Linux Advanced Workstation 2.1

Fixes 3 records

TI-2006-02165 CVE-2006-2224 · GHSA-mj28-wp87-qqjj

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2…

LOW 36

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10597 Published 2006-05-05 Fixed CWE-287

TI-2006-02164 CVE-2006-2223 · GHSA-xx8x-qm77-m9x3

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations…

LOW 36

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.1154 Published 2006-05-05 Fixed CWE-20

TI-2006-02217 CVE-2006-2276 · GHSA-6v4f-8f6p-qgjq

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of…

LOW 23

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00541 Published 2006-05-09 Fixed CWE-399