CVEvulnerability

CVE-2008-2476

9.3 HIGH Published 2008-10-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-10-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

Affected configurations

• force10 ftos • freebsd freebsd 6.3 • freebsd freebsd 7.1 • juniper jnos • netbsd netbsd • openbsd openbsd 4.2 • openbsd openbsd 4.3 • windriver vxworks (<= 6.4) • windriver vxworks 5 • windriver vxworks 5.5

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References