CVE ID:	CVE-2006-2223
Description:	RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.
Test IDs:	1.3.6.1.4.1.25623.1.0.59353   1.3.6.1.4.1.25623.1.0.59354   1.3.6.1.4.1.25623.1.0.56777
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2223 BugTraq ID: 17808 http://www.securityfocus.com/bid/17808 Bugtraq: 20060503 Quagga RIPD unauthenticated route table broadcast (Google Search) http://www.securityfocus.com/archive/1/432822/100/0/threaded Bugtraq: 20060503 Re: Quagga RIPD unauthenticated route injection (Google Search) http://www.securityfocus.com/archive/1/432823/100/0/threaded Debian Security Information: DSA-1059 (Google Search) http://www.debian.org/security/2006/dsa-1059 http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml http://www.osvdb.org/25224 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985 RedHat Security Advisories: RHSA-2006:0525 http://www.redhat.com/support/errata/RHSA-2006-0525.html RedHat Security Advisories: RHSA-2006:0533 http://www.redhat.com/support/errata/RHSA-2006-0533.html http://securitytracker.com/id?1016204 http://secunia.com/advisories/19910 http://secunia.com/advisories/20137 http://secunia.com/advisories/20138 http://secunia.com/advisories/20221 http://secunia.com/advisories/20420 http://secunia.com/advisories/20421 http://secunia.com/advisories/20782 http://secunia.com/advisories/21159 SGI Security Advisory: 20060602-01-U ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc SuSE Security Announcement: SUSE-SR:2006:017 (Google Search) http://www.novell.com/linux/security/advisories/2006_17_sr.html https://usn.ubuntu.com/284-1/ XForce ISS Database: quagga-ripv1-information-disclosure(26243) https://exchange.xforce.ibmcloud.com/vulnerabilities/26243