CVE-2006-2223 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2006-2223 Interim 1 21 2023-12-09T02:18:48Z current 2021-05-30T12:35:35Z 2023-12-09T02:18:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2006-2223 RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SAZWD5JRBTNNB2ALE6W6GDSCF5Z3ZCE2/#SAZWD5JRBTNNB2ALE6W6GDSCF5Z3ZCE2 E-Mail link for SUSE-SR:2006:017 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 openSUSE Tumbleweed libfpm_pb0 libfpm_pb0-1.2.4-2.14 libospf0 libospf0-1.2.4-2.14 libospfapiclient0 libospfapiclient0-1.2.4-2.14 libquagga_pb0 libquagga_pb0-1.2.4-2.14 libzebra1 libzebra1-1.2.4-2.14 quagga quagga-0.99.15-0.1.55 quagga-0.99.15-0.12.1 quagga-0.99.15-0.14.11 quagga-0.99.15-0.6.2 quagga-1.2.4-2.14 quagga-devel quagga-devel-0.99.15-0.14.1 quagga-devel-1.2.4-2.14 quagga-0.99.15-0.1.55 as a component of SUSE Linux Enterprise Server 11 SP1 quagga-0.99.15-0.6.2 as a component of SUSE Linux Enterprise Server 11 SP2 quagga-0.99.15-0.12.1 as a component of SUSE Linux Enterprise Server 11 SP3 quagga-0.99.15-0.14.11 as a component of SUSE Linux Enterprise Server 11 SP4 quagga-0.99.15-0.14.11 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 quagga-devel-0.99.15-0.14.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libfpm_pb0-1.2.4-2.14 as a component of openSUSE Tumbleweed libospf0-1.2.4-2.14 as a component of openSUSE Tumbleweed libospfapiclient0-1.2.4-2.14 as a component of openSUSE Tumbleweed libquagga_pb0-1.2.4-2.14 as a component of openSUSE Tumbleweed libzebra1-1.2.4-2.14 as a component of openSUSE Tumbleweed quagga-1.2.4-2.14 as a component of openSUSE Tumbleweed quagga-devel-1.2.4-2.14 as a component of openSUSE Tumbleweed libfpm_pb0 as a component of SUSE CaaS Platform 4.0 libospf0 as a component of SUSE CaaS Platform 4.0 libospfapiclient0 as a component of SUSE CaaS Platform 4.0 libquagga_pb0 as a component of SUSE CaaS Platform 4.0 libzebra1 as a component of SUSE CaaS Platform 4.0 quagga as a component of SUSE CaaS Platform 4.0 quagga-devel as a component of SUSE CaaS Platform 4.0 quagga as a component of SUSE Enterprise Storage 6 libfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libospf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libzebra1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS quagga as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS quagga-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libfpm_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libospf0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libzebra1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS quagga as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS quagga-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libfpm_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libospf0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libospfapiclient0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libquagga_pb0 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libzebra1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 quagga-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 libfpm_pb0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libospf0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libzebra1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS quagga as a component of SUSE Linux Enterprise Server 15 SP1-LTSS quagga-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS quagga as a component of SUSE Linux Enterprise Server 15-ESPOS libfpm_pb0 as a component of SUSE Linux Enterprise Server 15-LTSS libospf0 as a component of SUSE Linux Enterprise Server 15-LTSS libospfapiclient0 as a component of SUSE Linux Enterprise Server 15-LTSS libquagga_pb0 as a component of SUSE Linux Enterprise Server 15-LTSS libzebra1 as a component of SUSE Linux Enterprise Server 15-LTSS quagga as a component of SUSE Linux Enterprise Server 15-LTSS quagga-devel as a component of SUSE Linux Enterprise Server 15-LTSS quagga as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 libfpm_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libospf0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libospfapiclient0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libquagga_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libzebra1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 quagga as a component of SUSE Linux Enterprise Server for SAP Applications 15 quagga-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libfpm_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libospf0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libospfapiclient0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libquagga_pb0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libzebra1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 quagga as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 quagga-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 quagga as a component of SUSE Manager Proxy 4.0 quagga as a component of SUSE Manager Retail Branch Server 4.0 quagga as a component of SUSE Manager Server 4.0 RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information (routing state) via REQUEST packets such as SEND UPDATE. CVE-2006-2223 SUSE Linux Enterprise Server 11 SP1:quagga-0.99.15-0.1.55 SUSE Linux Enterprise Server 11 SP2:quagga-0.99.15-0.6.2 SUSE Linux Enterprise Server 11 SP3:quagga-0.99.15-0.12.1 SUSE Linux Enterprise Server 11 SP4:quagga-0.99.15-0.14.11 SUSE Linux Enterprise Software Development Kit 11 SP4:quagga-0.99.15-0.14.11 SUSE Linux Enterprise Software Development Kit 11 SP4:quagga-devel-0.99.15-0.14.1 openSUSE Tumbleweed:libfpm_pb0-1.2.4-2.14 openSUSE Tumbleweed:libospf0-1.2.4-2.14 openSUSE Tumbleweed:libospfapiclient0-1.2.4-2.14 openSUSE Tumbleweed:libquagga_pb0-1.2.4-2.14 openSUSE Tumbleweed:libzebra1-1.2.4-2.14 openSUSE Tumbleweed:quagga-1.2.4-2.14 openSUSE Tumbleweed:quagga-devel-1.2.4-2.14 SUSE CaaS Platform 4.0:libfpm_pb0 SUSE CaaS Platform 4.0:libospf0 SUSE CaaS Platform 4.0:libospfapiclient0 SUSE CaaS Platform 4.0:libquagga_pb0 SUSE CaaS Platform 4.0:libzebra1 SUSE CaaS Platform 4.0:quagga SUSE CaaS Platform 4.0:quagga-devel SUSE Enterprise Storage 6:quagga SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libfpm_pb0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libospf0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libospfapiclient0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libquagga_pb0 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libzebra1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:quagga SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:quagga-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libfpm_pb0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libospf0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libospfapiclient0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libquagga_pb0 SUSE Linux Enterprise High Performance Computing 15-LTSS:libzebra1 SUSE Linux Enterprise High Performance Computing 15-LTSS:quagga SUSE Linux Enterprise High Performance Computing 15-LTSS:quagga-devel SUSE Linux Enterprise Module for Server Applications 15 SP2:libfpm_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libospf0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libospfapiclient0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libquagga_pb0 SUSE Linux Enterprise Module for Server Applications 15 SP2:libzebra1 SUSE Linux Enterprise Module for Server Applications 15 SP2:quagga SUSE Linux Enterprise Module for Server Applications 15 SP2:quagga-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libfpm_pb0 SUSE Linux Enterprise Server 15 SP1-LTSS:libospf0 SUSE Linux Enterprise Server 15 SP1-LTSS:libospfapiclient0 SUSE Linux Enterprise Server 15 SP1-LTSS:libquagga_pb0 SUSE Linux Enterprise Server 15 SP1-LTSS:libzebra1 SUSE Linux Enterprise Server 15 SP1-LTSS:quagga SUSE Linux Enterprise Server 15 SP1-LTSS:quagga-devel SUSE Linux Enterprise Server 15-ESPOS:quagga SUSE Linux Enterprise Server 15-LTSS:libfpm_pb0 SUSE Linux Enterprise Server 15-LTSS:libospf0 SUSE Linux Enterprise Server 15-LTSS:libospfapiclient0 SUSE Linux Enterprise Server 15-LTSS:libquagga_pb0 SUSE Linux Enterprise Server 15-LTSS:libzebra1 SUSE Linux Enterprise Server 15-LTSS:quagga SUSE Linux Enterprise Server 15-LTSS:quagga-devel SUSE Linux Enterprise Server Business Critical Linux 15 SP1:quagga SUSE Linux Enterprise Server for SAP Applications 15 SP1:libfpm_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libospf0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libospfapiclient0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libquagga_pb0 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libzebra1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:quagga SUSE Linux Enterprise Server for SAP Applications 15 SP1:quagga-devel SUSE Linux Enterprise Server for SAP Applications 15:libfpm_pb0 SUSE Linux Enterprise Server for SAP Applications 15:libospf0 SUSE Linux Enterprise Server for SAP Applications 15:libospfapiclient0 SUSE Linux Enterprise Server for SAP Applications 15:libquagga_pb0 SUSE Linux Enterprise Server for SAP Applications 15:libzebra1 SUSE Linux Enterprise Server for SAP Applications 15:quagga SUSE Linux Enterprise Server for SAP Applications 15:quagga-devel SUSE Manager Proxy 4.0:quagga SUSE Manager Retail Branch Server 4.0:quagga SUSE Manager Server 4.0:quagga moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N