• info
• discussion
• exploit
• solution
• references

Quagga Information Disclosure and Route Injection Vulnerabilities

Solution:
The vendor has released patches to address these issues.

Please see the references for more information and vendor advisories.


Quagga Quagga Routing Software Suite 0.97.3

• Ubuntu quagga-doc_0.97.3-1ubuntu1.1_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/q/quagga/quagga-doc_0.97.3 -1ubuntu1.1_all.deb


• Ubuntu quagga_0.97.3-1ubuntu1.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/q/quagga/quagga_0.97.3-1ub untu1.1_amd64.deb


• Ubuntu quagga_0.97.3-1ubuntu1.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/q/quagga/quagga_0.97.3-1ub untu1.1_i386.deb


• Ubuntu quagga_0.97.3-1ubuntu1.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/q/quagga/quagga_0.97.3-1ub untu1.1_powerpc.deb

Quagga Quagga Routing Software Suite 0.98.5

• Quagga Fixes for 0.98.x RIPd bugs 261 and 262
  http://bugzilla.quagga.net/attachment.cgi?id=84&action=view

Quagga Quagga Routing Software Suite 0.99.3

• Quagga Fixes for 0.99.x RIPd bugs 261 and 262
  http://bugzilla.quagga.net/attachment.cgi?id=83&action=view