CVE-2008-2476

2008-10-0315:07:00

CWE-20

[email protected]

web.nvd.nist.gov

ipv6

ndp

freebsd

openbsd

netbsd

force10 ftos

juniper junos

wind river vxworks

cve-2008-2476

denial of service

network traffic

spoofed message

security vulnerability.

6.4 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.4%

JSON

The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

CPENameOperatorVersion
force10:ftosforce10 ftoseq*
freebsd:freebsdfreebsdeq6.3
windriver:vxworkswindriver vxworkseq5
netbsd:netbsdnetbsdeq*
juniper:jnosjuniper jnoseq*
openbsd:openbsdopenbsdeq4.2
windriver:vxworkswindriver vxworkseq5.5
freebsd:freebsdfreebsdeq7.1
openbsd:openbsdopenbsdeq4.3
windriver:vxworkswindriver vxworksle6.4

CPE	Name	Operator	Version
force10:ftos	force10 ftos	eq	*
freebsd:freebsd	freebsd	eq	6.3
windriver:vxworks	windriver vxworks	eq	5
netbsd:netbsd	netbsd	eq	*
juniper:jnos	juniper jnos	eq	*
openbsd:openbsd	openbsd	eq	4.2
windriver:vxworks	windriver vxworks	eq	5.5
freebsd:freebsd	freebsd	eq	7.1
openbsd:openbsd	openbsd	eq	4.3
windriver:vxworks	windriver vxworks	le	6.4