CVE-2006-2276

Published: May 10, 2006Modified: Apr 16, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface.

Affected (2)

Products: Quagga: Quagga

Quagga

1 product

Quagga

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Quagga Quagga	Version 0.98.5
Quagga Quagga	Version 0.99.3

Related CWEs

CWE-399

References (38)

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/20116

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20137

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20138

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20221

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20420

Source: cve@mitre.org

http://secunia.com/advisories/20421

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20782

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016204

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1059

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml

Source: cve@mitre.org

http://www.osvdb.org/25245

Source: cve@mitre.org

ExploitPatch

http://www.quagga.net/news2.php?y=2006&m=5&d=4#id1146764580

Source: cve@mitre.org

Patch

http://www.redhat.com/support/errata/RHSA-2006-0525.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0533.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/17979

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651

Source: cve@mitre.org

https://usn.ubuntu.com/284-1/

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc (unsafe URL)