Vulnerability Name:

CVE-2006-2276 (CCN-26528)

Assigned:2006-03-29
Published:2006-03-29
Updated:2018-10-03
Summary:bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.
CVSS v3 Severity:6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-399
Vulnerability Consequences:Denial of Service
References:Source: SGI
Type: UNKNOWN
20060602-01-U

Source: MITRE
Type: CNA
CVE-2006-2276

Source: CCN
Type: quagga-dev Mailing List, Wed Mar 29 14:31:45 IST 2006
quagga locks with command sh ip bgp community 1:*

Source: MLIST
Type: Exploit
[quagga-dev] 20060329 quagga locks with command sh ip bgp community 1:*

Source: CCN
Type: RHSA-2006-0525
quagga security update

Source: CCN
Type: RHSA-2006-0533
zebra security update

Source: CCN
Type: SA20116
Quagga bgpd Denial of Service Vulnerability

Source: SECUNIA
Type: Vendor Advisory
20116

Source: SECUNIA
Type: Vendor Advisory
20137

Source: SECUNIA
Type: Vendor Advisory
20138

Source: SECUNIA
Type: Vendor Advisory
20221

Source: SECUNIA
Type: UNKNOWN
20420

Source: SECUNIA
Type: Vendor Advisory
20421

Source: SECUNIA
Type: Vendor Advisory
20782

Source: CCN
Type: SECTRACK ID: 1016204
Quagga Bugs Let Remote Users Obtain or Modify Routing Information and Local Users Deny Service

Source: SECTRACK
Type: UNKNOWN
1016204

Source: CCN
Type: ASA-2006-114
zebra security update (RHSA-2006-0533)

Source: CCN
Type: ASA-2006-115
quagga security update (RHSA-2006-0525)

Source: DEBIAN
Type: UNKNOWN
DSA-1059

Source: DEBIAN
Type: DSA-1059
quagga -- several vulnerabilities

Source: CCN
Type: GLSA-200605-15
Quagga Routing Suite: Multiple vulnerabilities

Source: GENTOO
Type: UNKNOWN
GLSA-200605-15

Source: OSVDB
Type: Exploit, Patch
25245

Source: CCN
Type: OSVDB ID: 25245
Quagga bgpd Telnet Interface Local DoS

Source: CCN
Type: Quagga Web site
Quagga Software Routing Suite

Source: CCN
Type: Quagga Routing Suite Download page
Quagga Routing Suite

Source: CCN
Type: Quagga Software Routing Suite Web site
2006-05-04: 0.98.6 Release Candidate to address Security issues

Source: CONFIRM
Type: Patch
http://www.quagga.net/news2.php?y=2006&m=5&d=4#id1146764580

Source: REDHAT
Type: UNKNOWN
RHSA-2006:0525

Source: REDHAT
Type: UNKNOWN
RHSA-2006:0533

Source: BID
Type: UNKNOWN
17979

Source: CCN
Type: BID-17979
Quagga BGPD Local Denial Of Service Vulnerability

Source: CCN
Type: USN-284-1
Quagga vulnerabilities

Source: XF
Type: UNKNOWN
quagga-communitystr2com-dos(26528)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10651

Source: UBUNTU
Type: UNKNOWN
USN-284-1

Vulnerable Configuration:Configuration 1:
  • cpe:/a:quagga:quagga:0.98.5:*:*:*:*:*:*:*
  • OR cpe:/a:quagga:quagga:0.99.3:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:quagga:quagga:0.99.3:*:*:*:*:*:*:*
  • OR cpe:/a:quagga:quagga:0.98.3:*:*:*:*:*:*:*
  • AND
  • cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:10651
    V
    		bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.
    2013-04-29
    oval:com.redhat.rhsa:def:20060525
    P
    		RHSA-2006:0525: quagga security update (Moderate)
    2006-06-01
    oval:org.debian:def:1059
    V
    		several vulnerabilities
    2006-05-19
    BACK
    quagga quagga 0.98.5
    quagga quagga 0.99.3
    quagga quagga 0.99.3
    quagga quagga 0.98.3
    gentoo linux *
    redhat enterprise linux 2.1
    redhat enterprise linux 3
    redhat enterprise linux 3
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    redhat enterprise linux 4
    debian debian linux 3.1
    redhat linux advanced workstation 2.1