Test ID:	1.3.6.1.4.1.25623.1.0.64152
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-775-1 (quagga)
Summary:	Ubuntu USN-775-1 (quagga)
Description:	The remote host is missing an update to quagga announced via advisory USN-775-1. Details follow: It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: quagga 0.99.2-1ubuntu3.5 Ubuntu 8.04 LTS: quagga 0.99.9-2ubuntu1.2 Ubuntu 8.10: quagga 0.99.9-6ubuntu0.1 Ubuntu 9.04: quagga 0.99.11-1ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-775-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1572 http://www.openwall.com/lists/oss-security/2009/05/01/1 http://www.openwall.com/lists/oss-security/2009/05/01/2 http://marc.info/?l=quagga-dev&m=123364779626078&w=2 http://thread.gmane.org/gmane.network.quagga.devel/6513 Debian Security Information: DSA-1788 (Google Search) http://www.debian.org/security/2009/dsa-1788 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01107.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:109 SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://www.ubuntu.com/usn/usn-775-1 BugTraq ID: 34817 http://www.securityfocus.com/bid/34817 http://www.osvdb.org/54200 http://www.securitytracker.com/id?1022164 http://secunia.com/advisories/34999 http://secunia.com/advisories/35061 http://secunia.com/advisories/35203 http://secunia.com/advisories/35685 XForce ISS Database: quagga-systemnumber-dos(50317) http://xforce.iss.net/xforce/xfdb/50317
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: