USN-775-1: Quagga vulnerability

iBot · #1 (**permalink**) 05-12-2009

Referenced CVEs:
CVE-2009-1572

Description:
=========================================================== Ubuntu Security Notice USN-775-1 May 12, 2009 quagga vulnerability CVE-2009-1572 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: quagga 0.99.2-1ubuntu3.5 Ubuntu 8.04 LTS: quagga 0.99.9-2ubuntu1.2 Ubuntu 8.10: quagga 0.99.9-6ubuntu0.1 Ubuntu 9.04: quagga 0.99.11-1ubuntu0.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Mandriva: Subject: [Security Announce] [ MDVSA-2009:109 ] quagga	iBot	Security Advisories (RSS)	0	05-11-2009 02:15 AM
USN-664-1: Tk vulnerability	iBot	Security Advisories (RSS)	0	11-06-2008 03:50 PM
quagga 0.99.11 (Default branch)	iBot	Software Releases - RSS News	0	10-02-2008 02:30 PM
quagga 0.99.10 (Default branch)	iBot	Software Releases - RSS News	0	06-11-2008 12:10 PM
S-164: Tk Vulnerability	iBot	Security Advisories (RSS)	0	02-11-2008 05:10 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:


	Powered by