Test ID:	1.3.6.1.4.1.25623.1.1.1.1.2007.1382
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1382-1)
Summary:	The remote host is missing an update for the Debian 'quagga' package(s) announced via the DSA-1382-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'quagga' package(s) announced via the DSA-1382-1 advisory. Vulnerability Insight: It was discovered that BGP peers can trigger a NULL pointer dereference in the BGP daemon if debug logging is enabled, causing the BGP daemon to crash. For the old stable distribution (sarge), this problem has been fixed in version 0.98.3-7.5. For the stable distribution (etch), this problem has been fixed in version 0.99.5-5etch3. For the unstable distribution (sid), this problem has been fixed in version 0.99.9-1. We recommend that you upgrade your quagga packages. Affected Software/OS: 'quagga' package(s) on Debian 3.1, Debian 4. Solution: Please install the updated package(s). CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4826 2007-0028 http://www.trustix.org/errata/2007/0028/ 236141 http://sunsolve.sun.com/search/document.do?assetkey=1-26-236141-1 25634 http://www.securityfocus.com/bid/25634 26744 http://secunia.com/advisories/26744 26829 http://secunia.com/advisories/26829 26863 http://secunia.com/advisories/26863 27049 http://secunia.com/advisories/27049 29743 http://secunia.com/advisories/29743 ADV-2007-3129 http://www.vupen.com/english/advisories/2007/3129 ADV-2008-1195 http://www.vupen.com/english/advisories/2008/1195/references DSA-1382 http://www.debian.org/security/2007/dsa-1382 FEDORA-2007-2196 http://fedoranews.org/updates/FEDORA-2007-219.shtml MDKSA-2007:182 http://www.mandriva.com/security/advisories?name=MDKSA-2007:182 RHSA-2010:0785 http://www.redhat.com/support/errata/RHSA-2010-0785.html USN-512-1 http://www.ubuntu.com/usn/usn-512-1 [debian-security-announce] 20071003 [SECURITY] [DSA 1379-1] New quagga packages fix denial of service http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00153.html http://quagga.net/news2.php?y=2007&m=9&d=7#id1189190760 http://www.quagga.net/download/quagga-0.99.9.changelog.txt quagga-bgpd-dos(36551) https://exchange.xforce.ibmcloud.com/vulnerabilities/36551
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.