Description
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).
References
- 32406 third-party-advisory
- multiple-vendors-ndp-dos(45601) vdb-entry
- http://support.apple.com/kb/HT3467
- [4.2] 015: SECURITY FIX: October 2, 2008 vendor-advisory
- ADV-2008-2751 vdb-entry
- 1021109 vdb-entry
- 1020968 vdb-entry
- 32133 third-party-advisory
- VU#472363 third-party-advisory
- http://www.kb.cert.org/vuls/id/MAPG-7H2RY7
- 32116 third-party-advisory
- 1021132 vdb-entry
- https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view
- ADV-2008-2750 vdb-entry
- ADV-2008-2752 vdb-entry
- 31529 vdb-entry
- http://www.kb.cert.org/vuls/id/MAPG-7H2S68
- FreeBSD-SA-08:10 vendor-advisory
- [4.3] 006: SECURITY FIX: October 2, 2008 vendor-advisory
- 32112 third-party-advisory
- oval:org.mitre.oval:def:5670 vdb-entry signature
- 32117 third-party-advisory
- ADV-2009-0633 vdb-entry