What’s Vulnerable › Vulnerabilities

CVE-2006-2224

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-05-05 · updated 2026-06-16
• Weakness: CWE-287

Description

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.

Affected products

• Quagga Routing Software Suite: through 0.99.3; 0.95, 0.96.2, 0.96.3, 0.98.5

References

• http://bugzilla.quagga.net/show_bug.cgi?id=262
• http://secunia.com/advisories/19910
• http://secunia.com/advisories/20137
• http://secunia.com/advisories/20138
• http://secunia.com/advisories/20221
• http://secunia.com/advisories/20420
• http://secunia.com/advisories/20421
• http://secunia.com/advisories/20782
• http://secunia.com/advisories/21159
• http://securitytracker.com/id?1016204
• http://www.debian.org/security/2006/dsa-1059

Get alerted when CVE-2006-2224 or the next vulnerability affects your stack