CVEvulnerability

CVE-2009-2208

3.6 LOW Published 2009-06-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-06-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-264

Description

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

Affected configurations

• freebsd freebsd 6.3 • freebsd freebsd 6.3 releng • freebsd freebsd 6.4 • freebsd freebsd 7.1 • freebsd freebsd 7.2

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-782 Exposed IOCTL with Insufficient Access Control weakness

References