CVE-2003-0795 | BDVDB-2026-5991 Detail

Description#

The vty layer in Quagga before 0.96.4, and Zebra 0.93b and earlier, does not verify that sub-negotiation is taking place when processing the SE marker, which allows remote attackers to cause a denial of service (crash) via a malformed telnet command to the telnet CLI port, which may trigger a null dereference.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.redhat.com/support/errata/RHSA-2003-305.html
http://marc.info/?l=bugtraq&m=106883387304266&w=2
http://www.debian.org/security/2004/dsa-415
http://secunia.com/advisories/10563
http://www.redhat.com/support/errata/RHSA-2003-307.html

Exploit#

No public exploit known

History#

Version 12003-11-18Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.