CVE-2006-2224: Medium severity quagga quagga routing software suite vulnerability
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2224?
CVE-2006-2224 is classified as a medium severity vulnerability due to its potential impact on routing integrity.
How do I fix CVE-2006-2224?
To fix CVE-2006-2224, it is recommended to update Quagga to a version later than 0.99.3, which properly enforces RIPv2 authentication.
What software versions are affected by CVE-2006-2224?
CVE-2006-2224 affects Quagga versions 0.95 to 0.99.3, including versions 0.96.2, 0.96.3, and 0.98.5.
Can CVE-2006-2224 be exploited remotely?
Yes, CVE-2006-2224 can be exploited remotely by attackers sending malicious RIPv1 RESPONSE packets.
What are the potential consequences of CVE-2006-2224?
Exploitation of CVE-2006-2224 can lead to unauthorized modification of routing states, potentially disrupting network traffic.