OSVDB ID: 54200

Title: Quagga bgpd/bgp_aspath.c bgpd Service 4-byte ASN Data Handling Remote DoS

Info

Disclosure

May 03, 2009

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Availability
Solution: Patch / RCS
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

Security Tracker: 1022164
CVE ID: 2009-1572 (see also: NVD)
Bugtraq ID: 34817
Secunia Advisory ID: 34999 35061 35203 35685
ISS X-Force ID: 50317
Vendor Specific News/Changelog Entry: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526311
http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/c2b15dbcccedc2ea
http://lists.debian.org/debian-security-announce/2009/msg00099.html
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
https://lists.ubuntu.com/archives/ubuntu-security-announce/2009-May/000902.html
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01037.html
Mail List Post: http://lists.quagga.net/pipermail/quagga-users/2009-May/010587.html
http://lists.quagga.net/pipermail/quagga-users/2009-May/thread.html#10587
http://marc.info/?l=oss-security&m=124116856523623&w=2
http://marc.info/?l=oss-security&m=124117926004808&w=2
http://marc.info/?l=oss-security&m=124147020218054&w=2
http://marc.info/?l=quagga-dev&m=123364779626078&w=2
http://marc.info/?l=quagga-dev&m=123364779626078&w=2
Other Advisory URL: http://thread.gmane.org/gmane.network.quagga.devel/6513
http://www.debian.org/security/2009/dsa-1788
http://www.openwall.com/lists/oss-security/2009/05/01/1
http://www.openwall.com/lists/oss-security/2009/05/01/2
Vendor URL: http://www.quagga.net/
Vendor Specific Advisory URL: http://www.xerox.com/download/security/security-bulletin/16576-4c596b2a88f00/cert_XRX12-006_v1.01.pdf

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/54200