CVE-2006-2224
NoneCVSS
—
EPSS
10.6%
Published
May 5, 2006
CISA due date
—
The record
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | quagga | 0 | 0.99.3-2 |
| Debian:3.1 | quagga | 0 | 0.98.3-7.2 |
| Red Hat:enterprise_linux:3::as | quagga | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:3::as | quagga-debuginfo | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:3::es | quagga | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:3::es | quagga-debuginfo | 0 | 0:0.96.2-11.3E |
| Red Hat:enterprise_linux:4::as | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::as | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::as | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::as | quagga-devel | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::desktop | quagga-devel | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::es | quagga-devel | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga-contrib | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga-debuginfo | 0 | 0:0.98.3-2.4E |
| Red Hat:enterprise_linux:4::ws | quagga-devel | 0 | 0:0.98.3-2.4E |
Related vulnerabilities
- CVE-2006-2223 RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations… Also affects quagga
- CVE-2026-114638 Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the… CWE-287
- CVE-2026-114639 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass… CWE-287
- CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-287
- CVE-2026-107228 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-287
- CVE-2026-86781 The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40… CWE-287
- CVE-2026-14563 The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify the… CWE-287
- CVE-2026-14559 The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's… CWE-287