Test ID:	1.3.6.1.4.1.25623.1.0.71675
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1441-1 (quagga)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to quagga announced via advisory USN-1441-1. Details: It was discovered that Quagga incorrectly handled Link State Update messages with invalid lengths. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service. (CVE-2012-0249, CVE-2012-0250) It was discovered that Quagga incorrectly handled messages with a malformed Four-octet AS Number Capability. A remote attacker could use this flaw to cause Quagga to crash, resulting in a denial of service. (CVE-2012-0255) Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: quagga 0.99.20.1-0ubuntu0.11.10.2 Ubuntu 11.04: quagga 0.99.20.1-0ubuntu0.11.04.2 Ubuntu 10.04 LTS: quagga 0.99.20.1-0ubuntu0.10.04.2 http://www.securityspace.com/smysecure/catid.html?in=USN-1441-1 CVSS Score: 5.0 CVSS Vector: AV:L/AC:L/Au:NR/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0249 CERT/CC vulnerability note: VU#551715 http://www.kb.cert.org/vuls/id/551715 Debian Security Information: DSA-2459 (Google Search) http://www.debian.org/security/2012/dsa-2459 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078794.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078910.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078926.html RedHat Security Advisories: RHSA-2012:1258 http://rhn.redhat.com/errata/RHSA-2012-1258.html RedHat Security Advisories: RHSA-2012:1259 http://rhn.redhat.com/errata/RHSA-2012-1259.html http://secunia.com/advisories/48949 Common Vulnerability Exposure (CVE) ID: CVE-2012-0250 Common Vulnerability Exposure (CVE) ID: CVE-2012-0255
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.