Nessus Plugin #11925

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Zebra and Quagga Remote DoS

Family:

Denial of Service

Category:

mixed

Copyright:

This script is copyright (C) 2003 Matt North

Summary:

Attempts to crash the remote service Zebra and/or Quagga

Version:

$Revision: 1.8 $

Cve_id:

CAN-2003-0795, CAN-2003-0858

Bugtraq_id:

9029

Xrefs:

RHSA:RHSA-2003:307-01

Description:

A remote DoS exists in Zebra and/or Quagga when sending a telnet option
delimiter with no actual option data.

An attacker may exploit this flaw to prevent this host from doing proper
routing.

This affects all versions from 0.90a to 0.93b.

Solution: Quagga Version 0.96.4.
Also see: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=107140
Risk factor:High