CVE-2008-2476 in Jnos
要約 (英語)
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
予約する
2008年05月28日
公開
2008年10月03日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 44311 | Juniper Jnos IPv6 Neighbor Discovery 特権昇格 | 20 | 概念実証 | 公式な修正 | CVE-2008-2476 |