CVE-2006-2224
Fixed in a distro release EPSS 11%
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Products: quagga_routing_software_suite
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | quagga | 0.98.3-7.2 |
| Red Hat Enterprise Linux 3 | quagga | 0:0.96.2-11.3E |
| Red Hat Enterprise Linux 3 | quagga-debuginfo | 0:0.96.2-11.3E |
| Red Hat Enterprise Linux 4 | quagga | 0:0.98.3-2.4E |
| Red Hat Enterprise Linux 4 | quagga-contrib | 0:0.98.3-2.4E |
| Red Hat Enterprise Linux 4 | quagga-debuginfo | 0:0.98.3-2.4E |
| Red Hat Enterprise Linux 4 | quagga-devel | 0:0.98.3-2.4E |