CVE-2006-2224: quagga quagga_routing_software_suite Improper Authentication
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2006-2224 is a medium (CVSS 5.0) Improper Authentication vulnerability in quagga quagga_routing_software_suite. EPSS estimates a 10.36% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2 · Duplicates 1Timeline
- 05-05-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
10.36%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 10.36% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Quagga Routing Software Suite 0.9x - RIPd RIPv1 RESPONSE Packet Route Injection
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Debian1 product
- quagga< 0.99.3-2
Quagga1 product
- quagga_routing_software_suite≤ 0.99.3 | 0.95 | 0.96.2 | 0.96.3 | 0.98.5
2 vendors · 2 products
References
22 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10775VDB EntrySignatureX Refsource OVALWEB
