« Volver al listado

CVE-2006-5425

Estado: ModificadaMedia (5)—

XORP (eXtensible Open Router Platform) 1.2 y 1.3 permite a un atacante remoto provocar denegación de servicio (caida de aplicación) a través de un Open Shortest Path First (OSPF) Link State Advertisement (LSA) con un campo de longitud LSA no válido.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Xorp — Extensible Open Router Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5425",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-10-20T17:07:00.000",
  "references": [
    {
      "url": "http://labs.musecurity.com/advisories/MU-200610-01.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=full-disclosure&m=116115975806681&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/22462",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017079",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/20597",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4107",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.xorp.org/advisories/XORP_SA_06:01.ospf.txt",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29658",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://labs.musecurity.com/advisories/MU-200610-01.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=full-disclosure&m=116115975806681&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22462",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017079",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/20597",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4107",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.xorp.org/advisories/XORP_SA_06:01.ospf.txt",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/29658",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application crash) via an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field."
    },
    {
      "lang": "es",
      "value": "XORP (eXtensible Open Router Platform) 1.2 y 1.3 permite a un atacante remoto provocar denegación de servicio (caida de aplicación) a través de un Open Shortest Path First (OSPF) Link State Advertisement (LSA) con un campo de longitud LSA no válido."
    }
  ],
  "lastModified": "2026-06-16T22:31:10.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xorp:extensible_open_router_platform:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1E17E18-346C-428A-B1C2-30B5B98D7F06"
            },
            {
              "criteria": "cpe:2.3:a:xorp:extensible_open_router_platform:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FE90B86D-D534-44F1-9866-E4BAF37D1378"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}