Unscored severity · published Oct 3, 2008
CVE-2008-2476
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,…
–
CVSS
7.4%
EPSS
No
On KEV
Description
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
6.3; 7.1 · source: NVD
FT
Ftos · Force10
All versions, or not specified · source: NVD
JN
Jnos · Juniper
All versions, or not specified · source: NVD
NE
Netbsd · Netbsd
All versions, or not specified · source: NVD
OP
Openbsd · Openbsd
4.2; 4.3 · source: NVD
VX
Vxworks · Windriver
through 6.4; 5; 5.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2476
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2476
Vendor Advisory
http://secunia.com/advisories/32112
secunia.com
http://secunia.com/advisories/32116
Vendor Advisory
http://secunia.com/advisories/32117
secunia.com
http://secunia.com/advisories/32133
secunia.com
http://secunia.com/advisories/32406