CVE-2006-5425

Published: Oct 20, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application crash) via an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field.

Affected (2)

Products: Xorp: Extensible Open Router Platform

Xorp

1 product

Extensible Open Router Platform

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xorp Extensible Open Router Platform	Version 1.2
Xorp Extensible Open Router Platform	Version 1.3

References (16)

http://labs.musecurity.com/advisories/MU-200610-01.txt

Source: cve@mitre.org

http://marc.info/?l=full-disclosure&m=116115975806681&w=2

Source: cve@mitre.org

http://secunia.com/advisories/22462

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1017079

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/20597

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4107

Source: cve@mitre.org

http://www.xorp.org/advisories/XORP_SA_06:01.ospf.txt

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29658

Source: cve@mitre.org

http://labs.musecurity.com/advisories/MU-200610-01.txt