zebra security update

CentOS Errata and Security Advisory CESA-2006:0533-01 Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based...

Moderate: Red Hat Security Advisory: zebra security update

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was foun...

Zebra and Quagga Remote DoS Vulnerability

A remote DoS exists in Zebra and/or Quagga when sending a telnet option delimiter with no actual option data. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Zebra and Quagga Remote DoS

A remote DoS exists in Zebra and/or Quagga when sending a telnet option delimiter with no actual option data. An attacker may exploit this flaw to prevent this host from doing proper routing. This affects all versions from 0.90a to 0.93b. OpenVAS Vulnerability Test $Id: zebrados.nasl 6046...

Default Password (zebra) for Zebra

The remote host is running Zebra, a routing daemon. The remote Zebra installation uses as its password the default, 'zebra'. An attacker may log in using this password and control the routing tables of the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Debian DSA-415-1 : zebra - denial of service

Two vulnerabilities were discovered in zebra, an IP routing daemon : - CAN-2003-0795 - a bug in the telnet CLI could allow a remote attacker to cause a zebra process to crash, resulting in a denial of service. - CAN-2003-0858 - netlink messages sent by other users rather than the kernel would be...

Zebra Routing Software Detection

Binary data 1177.prm...

NETGEAR DG834G SPECIAL FEATURES

By opening http://192.168.0.1/setup.cgi?todo=debug you enable the router's debug mode.Then you just telnet at 192.168.0.1 at port 23 and then you have a root shell. Also i found that if you just telnet to 192.168.0.1 2602 you will get a prompt from the service ZEBRA that is running on the router....

FreeBSD : zebra/quagga denial of service vulnerability (212)

The following package needs to be updated: quagga %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgcad045c081a511d896450020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : zebra (RHSA-2003:305)

Updated zebra packages that close a locally-exploitable and a remotely-exploitable denial of service vulnerability are now available. Zebra an open source implementation of TCP/IP routing software. Jonny Robertson reported that Zebra can be remotely crashed if a Zebra password has been enabled an...

[SECURITY] [DSA 415-1] New zebra packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 415-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 6th, 2004 http://www.debian.org/security/faq -...

DSA-415 zebra - denial of service

Two vulnerabilities were discovered in zebra, an IP routing daemon: CAN-2003-0795 - a bug in the telnet CLI could allow a remote attacker to cause a zebra process to crash, resulting in a denial of service. CAN-2003-0858 - netlink messages sent by other users rather than the kernel would be...

CVE-2003-0795

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service crash via a malformed telnet command to the telnet CLI port, which may trigger a null...

CVE-2003-0858

Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

zebra/quagga denial of service vulnerability

A remote attacker could cause zebra/quagga to crash by sending a malformed telnet command to their management port...

CVE-2003-0858

Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

CVE-2003-0858

Removed by vendor...

CVE-2003-0795

Removed by vendor...

CVE-2003-0795

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service crash via a malformed telnet command to the telnet CLI port, which may trigger a null...

CVE-2003-0795

The CVE-2003-0795 issue affects Zebra/Quagga: the vty/telnet CLI handling does not verify sub-negotiation for the SE marker, enabling a remote attacker to crash the Zebra/Quagga process (denial of service) via malformed telnet commands. Public sources in the connected docs confirm the vulnerabili...