This host is installed with Quagga for Linux and is prone to Denial of Service Vulnerability.

Successful exploitation will let the attacker crash the daemon by advertising specially crafted AS paths and cause denial of service. Impact level: Application

Apply the security update with the patch 0.99.10-1lenny2 for stable versions. Apply the security update with the patch 0.99.11-2 for unstable versions. http://www.debian.org/security/2009/dsa-1788 ***** NOTE: Please ignore the warning if patch has been already applied. *****

This flaw is due to an assertion error in the BGP daemon while handling an AS path containing multiple 4 byte AS numbers.

Quagga version 0.99.11 and prior

• http://osvdb.org/54200
• http://secunia.com/advisories/34999
• http://www.openwall.com/lists/oss-security/2009/05/01/2

---

Updated on 2015-03-25