Test ID:	1.3.6.1.4.1.25623.1.0.56792
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200605-15 (quagga)
Summary:	The remote host is missing updates announced in;advisory GLSA 200605-15.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200605-15. Vulnerability Insight: Quagga's RIP daemon allows the injection of routes and the disclosure of routing information. The BGP daemon is vulnerable to a Denial of Service. Solution: All Quagga users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=net-misc/quagga-0.98.6-r1' CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2223 BugTraq ID: 17808 http://www.securityfocus.com/bid/17808 Bugtraq: 20060503 Quagga RIPD unauthenticated route table broadcast (Google Search) http://www.securityfocus.com/archive/1/432822/100/0/threaded Bugtraq: 20060503 Re: Quagga RIPD unauthenticated route injection (Google Search) http://www.securityfocus.com/archive/1/432823/100/0/threaded Debian Security Information: DSA-1059 (Google Search) http://www.debian.org/security/2006/dsa-1059 http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml http://www.osvdb.org/25224 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985 http://www.redhat.com/support/errata/RHSA-2006-0525.html http://www.redhat.com/support/errata/RHSA-2006-0533.html http://securitytracker.com/id?1016204 http://secunia.com/advisories/19910 http://secunia.com/advisories/20137 http://secunia.com/advisories/20138 http://secunia.com/advisories/20221 http://secunia.com/advisories/20420 http://secunia.com/advisories/20421 http://secunia.com/advisories/20782 http://secunia.com/advisories/21159 SGI Security Advisory: 20060602-01-U ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc SuSE Security Announcement: SUSE-SR:2006:017 (Google Search) http://www.novell.com/linux/security/advisories/2006_17_sr.html https://usn.ubuntu.com/284-1/ XForce ISS Database: quagga-ripv1-information-disclosure(26243) https://exchange.xforce.ibmcloud.com/vulnerabilities/26243 Common Vulnerability Exposure (CVE) ID: CVE-2006-2224 Bugtraq: 20060503 Quagga RIPD unauthenticated route injection (Google Search) http://www.securityfocus.com/archive/1/432856/100/0/threaded http://www.osvdb.org/25225 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775 XForce ISS Database: quagga-ripd-ripv1-response-security-bypass(26251) https://exchange.xforce.ibmcloud.com/vulnerabilities/26251 Common Vulnerability Exposure (CVE) ID: CVE-2006-2276 BugTraq ID: 17979 http://www.securityfocus.com/bid/17979 http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html http://www.osvdb.org/25245 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651 http://secunia.com/advisories/20116
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.