CVE-2003-0795 The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial....
MediumCVSS 5.0
EPSS 8.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU zebra | = 0.91a | No fix listed |
| GNU zebra | = 0.92a | No fix listed |
| GNU zebra | = 0.93a | No fix listed |
| GNU zebra | = 0.93b | No fix listed |
| quagga | <= 0.96.3 | No fix listed |
| quagga | = 0.95 | No fix listed |
| quagga | = 0.96 | No fix listed |
| quagga | = 0.96.1 | No fix listed |
| quagga | = 0.96.2 | No fix listed |
| sgi propack | = 2.2.1 | No fix listed |
| sgi propack | = 2.3 | No fix listed |
References
- 20031114 Quagga remote vulnerability mailing-list
- 10563 third-party-advisory vendor-advisory
- DSA-415 patch vendor-advisory
- RHSA-2003:305 patch vendor-advisory
- RHSA-2003:307 patch vendor-advisory