Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure
🗓️ 03 May 2006 00:00:00Reported by Konstantin V. GavrilenkoType 
exploitdb🔗 www.exploit-db.com👁 51 Views
| Reporter | Title | Published | Views | Family All 40 |
|---|---|---|---|---|
 | Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality of protected information | 28 Apr 201500:00 | – | bdu_fstec |
 | CentOS 3 / 4 : quagga (CESA-2006:0525) | 3 Jul 200600:00 | – | nessus |
| Debian DSA-1059-1 : quagga - several vulnerabilities | 14 Oct 200600:00 | – | nessus |
| Fedora Core 4 : quagga-0.98.6-1.fc4 (2006-843) | 17 Jan 200700:00 | – | nessus |
| Fedora Core 5 : quagga-0.98.6-1.FC5 (2006-845) | 17 Jan 200700:00 | – | nessus |
| GLSA-200605-15 : Quagga Routing Suite: Multiple vulnerabilities | 22 May 200600:00 | – | nessus |
| Quagga < 0.98.6 / 0.99.4 Multiple Vulnerabilities | 29 Jun 201200:00 | – | nessus |
| RHEL 3 / 4 : quagga (RHSA-2006:0525) | 5 Jun 200600:00 | – | nessus |
| RHEL 2.1 : zebra (RHSA-2006:0533) | 5 Jun 200600:00 | – | nessus |
| openSUSE 10 Security Update : quagga (quagga-1422) | 17 Oct 200700:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/17808/info
Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced.
These issues allow remote attackers to gain access to potentially sensitive network-routing configuration information and to inject arbitrary routes into the RIP routing table. This may aid malicious users in further attacks against targeted networks.
Quagga versions 0.98.5 and 0.99.3 are vulnerable to these issues; other versions may also be affected.
sendip -p ipv4 -is 192.168.66.102 -p udp -us 520 -ud 520 -p rip -rv 1 -rc 1 -re 0:0:0:0:0:16 192.168.66.111Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Aug 2013 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 25
EPSS0.1128