CVE-2007-1995: Improper Input Validation

bgpd/bgpattr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not validate length values in the MPREACHNLRI and MPUNREACHNLRI attributes, which allows remote attackers to cause a denial of service daemon crash or exit via crafted UPDATE messages that trigger an assertion...

Design/Logic Flaw

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...

CVE-2006-2276

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...

CVE-2006-2276

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...

CVE-2006-2276

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...

CVE-2006-2276

CVE-2006-2276 affects Quagga 0.98 and 0.99 prior to 20060504. Local users via telnet can trigger a denial-of-service (CPU exhaustion) by issuing a specific “sh ip bgp” command. The OpenVAS/Nessus entries corroborate this trio of vulnerabilities (CVE-2006-2223, CVE-2006-2224, and CVE-2006-2276) in...

CVE-2006-2276

Removed by vendor...

CVE-2006-2276: Undefined Security Weakness

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service CPU consumption via a certain sh ip bgp command entered in the telnet interface...