CVE-2009-2208

Опубликовано: 25 июн. 2009

Источник: nvd

CVSS2: 3.6

EPSS Низкий

Описание

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

Ссылки

http://secunia.com/advisories/35410
Vendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
Patch
Vendor Advisory
http://www.securityfocus.com/bid/35285
Patch
http://www.securitytracker.com/id?1022367
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
http://secunia.com/advisories/35410
Vendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
Patch
Vendor Advisory
http://www.securityfocus.com/bid/35285
Patch
http://www.securitytracker.com/id?1022367
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p11:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p6:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p8:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p9:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p6:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*

EPSS

Процентиль: 13%

0.00043

Низкий

3.6 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2009-2208

ubuntu

больше 16 лет назад

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

CVE-2009-2208

debian

больше 16 лет назад

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIO ...

GHSA-g64f-whgh-84jj

github

почти 4 года назад

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

EPSS

Процентиль: 13%

0.00043

Низкий

3.6 Low

CVSS2

Дефекты

CWE-264