{"id":"CVE-2006-2223","aliases":["DSA-1059-1","EUVD-2006-2224","GHSA-xx8x-qm77-m9x3","RHSA-2006:0525","openSUSE-SU-2024:11290-1"],"status":"published","title":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)...","description":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.1154,"percentile":0.96052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2006-05-05T19:00:00Z","modified":"2026-06-26T10:04:38Z","exploits":[{"source":"exploitdb","id":"EDB-27801","title":"Quagga Routing Software Suite 0.9x - RIPd RIPv1 Request Routing Table Disclosure","type":"remote","platform":"linux","date":"2006-05-03","verified":true,"url":"https://www.exploit-db.com/exploits/27801"}],"affected":[{"source":"osv","ecosystem":"Debian:3.1","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.98.3-7.2"}]}],"versions":["0.98.3-7","0.98.3-7.1"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96.2-11.3E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96.2-11.3E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96.2-11.3E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.96.2-11.3E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"quagga-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"quagga-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"quagga-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"quagga-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"quagga-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"quagga-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"quagga-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"quagga-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"quagga-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.98.3-2.4E"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"quagga","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.14"}]}],"bundled":12}],"products":[{"vendor":"quagga","product":"quagga"}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2006_17_sr.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/284-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26243","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://secunia.com/advisories/20782","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/20138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/432823/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://secunia.com/advisories/20421","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc","tags":["vendor-advisory","x_refsource_SGI","x_transferred","advisory"]},{"url":"http://www.osvdb.org/25224","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0525.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/20137","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://bugzilla.quagga.net/show_bug.cgi?id=261","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://securitytracker.com/id?1016204","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://secunia.com/advisories/19910","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9985","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/17808","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Patch","fix"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0533.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"http://secunia.com/advisories/21159","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/432822/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.debian.org/security/2006/dsa-1059","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/20221","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/20420","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2223","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xx8x-qm77-m9x3"},{"url":"https://access.redhat.com/errata/RHSA-2006:0525","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=191376","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0525.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2223","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2223","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618092","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-2276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-2276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2276","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5281","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5381","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2006-2223","description":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.","status":"published","published":"2006-05-05T19:00:00Z","modified":"2024-08-07T17:43:28.938Z","updated_at":"2026-11-02T14:33:48.871799Z"}],"euvd":[{"id":"EUVD-2006-2224","description":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.","status":"published","published":"2006-05-05T19:00:00Z","modified":"2024-08-07T17:43:28Z","updated_at":"2026-11-03T01:16:01.8348Z"}],"ghsa":[{"id":"GHSA-xx8x-qm77-m9x3","title":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)...","description":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.","status":"published","published":"2022-05-03T03:15:55Z","modified":"2023-02-01T05:01:14Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:49:41.640503Z"}],"nvd":[{"id":"CVE-2006-2223","description":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.","status":"published","published":"2006-05-05T19:02:00Z","modified":"2026-06-16T22:24:35.497Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:02.98271Z"}],"osv":[{"id":"CVE-2006-2223","description":"RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.","status":"withdrawn","published":"2006-05-05T19:02:00Z","modified":"2024-06-30T15:57:02.792399Z","updated_at":"2026-11-02T15:43:56.581247Z"},{"id":"DSA-1059-1","title":"quagga - several","status":"published","published":"2006-05-19T00:00:00Z","modified":"2026-03-09T01:01:39.365655Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"openSUSE-SU-2024:11290-1","title":"libfpm_pb0-1.2.4-2.14 on GA media","description":"These are all security issues fixed in the libfpm_pb0-1.2.4-2.14 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:56.149996Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2006:0525","title":"Red Hat Security Advisory: quagga security update","status":"published","published":"2024-09-15T16:12:36Z","modified":"2026-06-26T10:04:38Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}