zebra security update

CentOS Errata and Security Advisory CESA-2006:0533-01 Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based...

quagga security update

CentOS Errata and Security Advisory CESA-2006:0525 Updated quagga packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga manages the TCP/IP based routing protocol. It takes a...

security flaw

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

security flaw

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

Moderate: Red Hat Security Advisory: quagga security update

Updated quagga packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Quagga manages the TCP/IP based routing protocol. It takes a multi-server and multi-thread approach to resolve...

Moderate: Red Hat Security Advisory: zebra security update

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

GLSA-200605-15 : Quagga Routing Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200605-15 Quagga Routing Suite: Multiple vulnerabilities Konstantin V. Gavrilenko discovered two flaws in the Routing Information Protocol RIP daemon that allow the processing of RIP v1 packets carrying no authentication even when...

Quagga Routing Suite: Multiple vulnerabilities

Background The Quagga Routing Suite implements three major routing protocols: RIP v1/v2/v3, OSPF v2/v3 and BGP4. Description Konstantin V. Gavrilenko discovered two flaws in the Routing Information Protocol RIP daemon that allow the processing of RIP v1 packets carrying no authentication even whe...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

CVE-2006-2223

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

CVE-2006-2224

CVE-2006-2224 affects Quagga RIPd where RIPv2 authentication is not properly enforced, allowing remote attackers to inject/modify routes via RIPv1 RESPONSE packets. Affected are Quagga 0.98 and 0.99 before 20060503. Public advisories (Debian, Fedora/OpenVAS, Gentoo) indicate upgrading to fixed re...

CVE-2006-2224

Removed by vendor...

CVE-2006-2223

Removed by vendor...

CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection

Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication an...

Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure

Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication a...

Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection

source: https://www.securityfocus.com/bid/17808/info Quagga is susceptible to remote information-disclosure and route-injection vulnerabilities. The application fails to properly ensure that required authentication and protocol configuration options are enforced. These issues allow remote attacke...