CVE-2006-2276: Medium severity Quagga Quagga vulnerability
Published May 9, 2006
·Updated
bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.
Affected Software
2 affected components
Quagga Quagga=0.98.5
Quagga Quagga=0.99.3
Remediation
Patch Available
Patch Available
Event History
May 9, 2006
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2276?
CVE-2006-2276 has been classified as a denial of service vulnerability that can lead to significant CPU consumption.
2
How do I fix CVE-2006-2276?
To fix CVE-2006-2276, users should upgrade to a patched version of Quagga that is released after May 4, 2006.
3
Which versions of Quagga are affected by CVE-2006-2276?
CVE-2006-2276 affects Quagga versions 0.98.5 and 0.99.3.
4
What kind of attack is associated with CVE-2006-2276?
CVE-2006-2276 allows local users to induce a denial of service by executing specific commands in the telnet interface.
5
Who is vulnerable to CVE-2006-2276?
Local users with access to the telnet interface of affected Quagga installations are vulnerable to CVE-2006-2276.