Vulnerability Details CVE-2009-2208
FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.0%
CVSS Severity
CVSS v2 Score 3.6
References
- http://secunia.com/advisories/35410
- http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
- http://www.securityfocus.com/bid/35285
- http://www.securitytracker.com/id?1022367
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
- http://secunia.com/advisories/35410
- http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
- http://www.securityfocus.com/bid/35285
- http://www.securitytracker.com/id?1022367
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
Products affected by CVE-2009-2208
-
cpe:2.3:o:freebsd:freebsd:6.3
-
cpe:2.3:o:freebsd:freebsd:6.3_releng
-
cpe:2.3:o:freebsd:freebsd:6.4
-
cpe:2.3:o:freebsd:freebsd:7.1
-
cpe:2.3:o:freebsd:freebsd:7.2