CVE-2006-2223

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-05 · updated 2026-06-16
Weakness: CWE-20

Description

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE.

Affected products

quagga: 0.98.5, 0.99.3

References

http://bugzilla.quagga.net/show_bug.cgi?id=261
http://secunia.com/advisories/19910
http://secunia.com/advisories/20137
http://secunia.com/advisories/20138
http://secunia.com/advisories/20221
http://secunia.com/advisories/20420
http://secunia.com/advisories/20421
http://secunia.com/advisories/20782
http://secunia.com/advisories/21159
http://securitytracker.com/id?1016204
http://www.debian.org/security/2006/dsa-1059

Get alerted when CVE-2006-2223 or the next vulnerability affects your stack