CVE-2009-2208

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-2208
FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

3.6 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:P

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/35410 Vendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc Patch Vendor Advisory
http://www.securityfocus.com/bid/35285 Patch
http://www.securitytracker.com/id?1022367
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
http://secunia.com/advisories/35410 Vendor Advisory
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc Patch Vendor Advisory
http://www.securityfocus.com/bid/35285 Patch
http://www.securitytracker.com/id?1022367
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.3:release_p11:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.3:release_p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.3:release_p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.3:release_p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:release_p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:release_p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:release_p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:release-p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:release-p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:7.2:stable:*:*:*:*:*:*
History

21 Nov 2024, 01:04

Type Values Removed Values Added
References () http://secunia.com/advisories/35410 - Vendor Advisory () http://secunia.com/advisories/35410 - Vendor Advisory
References () http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc - Patch, Vendor Advisory () http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/35285 - Patch () http://www.securityfocus.com/bid/35285 - Patch
References () http://www.securitytracker.com/id?1022367 - () http://www.securitytracker.com/id?1022367 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/51044 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/51044 -
Information

Published : 2009-06-25 02:00

Updated : 2025-04-09 00:30

NVD link : CVE-2009-2208

Mitre link : CVE-2009-2208

CVE.ORG link : CVE-2009-2208

JSON object : View

Products Affected

freebsd

  • freebsd
CWE
CWE-264

Permissions, Privileges, and Access Controls