CVE-2008-2476 Other in n/a
Remote attackers can spoof IPv6 Neighbor Discovery messages to cause denial of service or intercept private network traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-2476?
CVE-2008-2476 is a critical vulnerability in Freebsd Freebsd, published on 3 Oct 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).
Weakness: CWE-20
Which versions are affected by CVE-2008-2476?
It affects 6 products.
Products include Force10 Ftos, Freebsd Freebsd, Juniper Jnos, Netbsd Netbsd, Openbsd Openbsd, Windriver Vxworks.
How do I fix CVE-2008-2476?
No fix has been published for CVE-2008-2476 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-2476 being exploited?
There is no known exploitation of CVE-2008-2476 in the wild and no public exploit code.
Sources
Also known as GHSA-xvw3-ghj5-vvrf.