CVE ID:	CVE-2006-2224
Description:	RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Test IDs:	1.3.6.1.4.1.25623.1.0.59353   1.3.6.1.4.1.25623.1.0.56808   1.3.6.1.4.1.25623.1.0.59354   1.3.6.1.4.1.25623.1.0.56777
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2224 BugTraq ID: 17808 http://www.securityfocus.com/bid/17808 Bugtraq: 20060503 Quagga RIPD unauthenticated route injection (Google Search) http://www.securityfocus.com/archive/1/432856/100/0/threaded Bugtraq: 20060503 Re: Quagga RIPD unauthenticated route injection (Google Search) http://www.securityfocus.com/archive/1/432823/100/0/threaded Debian Security Information: DSA-1059 (Google Search) http://www.debian.org/security/2006/dsa-1059 http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml http://www.osvdb.org/25225 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775 RedHat Security Advisories: RHSA-2006:0525 http://www.redhat.com/support/errata/RHSA-2006-0525.html RedHat Security Advisories: RHSA-2006:0533 http://www.redhat.com/support/errata/RHSA-2006-0533.html http://securitytracker.com/id?1016204 http://secunia.com/advisories/19910 http://secunia.com/advisories/20137 http://secunia.com/advisories/20138 http://secunia.com/advisories/20221 http://secunia.com/advisories/20420 http://secunia.com/advisories/20421 http://secunia.com/advisories/20782 http://secunia.com/advisories/21159 SGI Security Advisory: 20060602-01-U ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc SuSE Security Announcement: SUSE-SR:2006:017 (Google Search) http://www.novell.com/linux/security/advisories/2006_17_sr.html https://usn.ubuntu.com/284-1/ XForce ISS Database: quagga-ripd-ripv1-response-security-bypass(26251) https://exchange.xforce.ibmcloud.com/vulnerabilities/26251