Unscored CVE-2009-2208 EUVD-2009-2204GHSA-g64f-whgh-84jj

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv…

Published Jun 24, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

References

35285 vdb-entry
freebsd-siocsifinfo-security-bypass(51044) vdb-entry
1022367 vdb-entry
35410 third-party-advisory
FreeBSD-SA-09:10 vendor-advisory