Unscored severity · published May 5, 2006
CVE-2006-2224
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE…
–
CVSS
10.6%
EPSS
No
On KEV
Description
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QR
Quagga Routing Software Suite · Quagga
through 0.99.3; 0.95; 0.96.2; 0.96.3; 0.98.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2224
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2224
secunia.com
http://secunia.com/advisories/19910
secunia.com
http://secunia.com/advisories/20137
secunia.com
http://secunia.com/advisories/20138
secunia.com
http://secunia.com/advisories/20221
secunia.com
http://secunia.com/advisories/20420
More from Quagga Routing Software Suite
–
CVE-2003-0858
Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface
–
CVE-2003-0859
The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink…