Debian Security Advisory DSA 415-1 (zebra)

The remote host is missing an update to zebra announced via advisory DSA 415-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-0795

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service crash via a malformed telnet command to the telnet CLI port, which may trigger a null...

CVE-2003-0795

The CVE-2003-0795 issue affects Zebra/Quagga: the vty/telnet CLI handling does not verify sub-negotiation for the SE marker, enabling a remote attacker to crash the Zebra/Quagga process (denial of service) via malformed telnet commands. Public sources in the connected docs confirm the vulnerabili...