Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-2476
HistoryOct 03, 2008 - 3:07 p.m.

CVE-2008-2476

2008-10-0315:07:10
CWE-20
[email protected]
web.nvd.nist.gov
83
ipv6
ndp
freebsd
openbsd
netbsd
force10 ftos
juniper junos
wind river vxworks
cve-2008-2476
denial of service
network traffic
spoofed message
security vulnerability.

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.6%

JSON

The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

Affected configurations

NVD
Node
force10ftos
OR
freebsdfreebsdMatch6.3
OR
freebsdfreebsdMatch7.1
OR
juniperjnos
OR
netbsdnetbsd
OR
openbsdopenbsdMatch4.2
OR
openbsdopenbsdMatch4.3
OR
windrivervxworksRange≤6.4
OR
windrivervxworksMatch5
OR
windrivervxworksMatch5.5

References

Related

f5 2
securityvulns 4
prion 3
freebsd_advisory 1
openvas 4
cvelist 3
nessus 4
nvd 3
freebsd 1
redhatcve 1
cve 2
cert 1
f5
f5
SOL9528 - IPv6 Neighbor Discovery Protocol (NDP) vulnerability - CVE-2008-2476 - VU#472363
2008-12-18 00:00:00
K9528 : IPv6 Neighbor Discovery Protocol (NDP) vulnerability CVE-2008-2476 - VU#472363
2013-03-27 00:00:00
securityvulns
securityvulns
FreeBSD IPv6 Neighbor Discovery Protocol security vulnerability
2008-10-03 00:00:00
FreeBSD Security Advisory FreeBSD-SA-08:10.nd6
2008-10-03 00:00:00
[security bulletin] HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access
2009-02-05 00:00:00
prion
prion
Design/Logic Flaw
2008-10-03 15:07:00
Sql injection
2008-10-03 15:07:00
Sql injection
2009-02-04 19:30:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-08:10.nd6
2008-10-02 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-08:10.nd6.asc)
2008-10-03 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-08:10.nd6.asc)
2008-10-03 00:00:00
HP-UX Update for IPv6 HPSBUX02407
2009-05-05 00:00:00
cvelist
cvelist
CVE-2008-2476
2008-10-03 15:00:00
CVE-2009-0418
2009-02-04 19:00:00
CVE-2008-4404
2022-10-03 16:13:58
nessus
nessus
F5 Networks BIG-IP : IPv6 Neighbor Discovery Protocol (NDP) vulnerability (SOL9528)
2016-01-28 00:00:00
HP-UX PHNE_38680 : HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access (HPSBUX02407 SSRT080107 rev.1)
2009-02-12 00:00:00
HP-UX PHNE_37897 : HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthorized Access (HPSBUX02407 SSRT080107 rev.1)
2009-02-12 00:00:00
nvd
nvd
CVE-2008-2476
2008-10-03 15:07:10
CVE-2008-4404
2008-10-03 15:07:10
CVE-2009-0418
2009-02-04 19:30:00
freebsd
freebsd
FreeBSD -- IPv6 Neighbor Discovery Protocol routing vulnerability
2008-10-01 00:00:00
redhatcve
redhatcve
CVE-2008-2476
2015-10-30 09:22:00
cve
cve
CVE-2008-4404
2022-10-03 16:13:58
CVE-2009-0418
2009-02-04 19:30:00
cert
cert
IPv6 implementations insecurely update Forwarding Information Base
2008-10-02 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.6%

JSON
Related for CVE-2008-2476
f52securityvulns4prion3freebsd_advisory1openvas4cvelist3nessus4nvd3freebsd1redhatcve1cve2cert1