cvelist/2008/2xxx/CVE-2008-2476.json

178 lines
5.8 KiB
JSON

{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ID" : "CVE-2008-2476",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a",
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
},
"vendor_name" : "n/a"
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB)."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "n/a"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"name" : "https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view",
"refsource" : "MISC",
"url" : "https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view"
},
{
"name" : "http://www.kb.cert.org/vuls/id/MAPG-7H2RY7",
"refsource" : "CONFIRM",
"url" : "http://www.kb.cert.org/vuls/id/MAPG-7H2RY7"
},
{
"name" : "http://www.kb.cert.org/vuls/id/MAPG-7H2S68",
"refsource" : "CONFIRM",
"url" : "http://www.kb.cert.org/vuls/id/MAPG-7H2S68"
},
{
"name" : "http://support.apple.com/kb/HT3467",
"refsource" : "CONFIRM",
"url" : "http://support.apple.com/kb/HT3467"
},
{
"name" : "FreeBSD-SA-08:10",
"refsource" : "FREEBSD",
"url" : "http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc"
},
{
"name" : "NetBSD-SA2008-013",
"refsource" : "NETBSD",
"url" : "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc"
},
{
"name" : "[4.2] 015: SECURITY FIX: October 2, 2008",
"refsource" : "OPENBSD",
"url" : "http://www.openbsd.org/errata42.html#015_ndp"
},
{
"name" : "[4.3] 006: SECURITY FIX: October 2, 2008",
"refsource" : "OPENBSD",
"url" : "http://www.openbsd.org/errata43.html#006_ndp"
},
{
"name" : "VU#472363",
"refsource" : "CERT-VN",
"url" : "http://www.kb.cert.org/vuls/id/472363"
},
{
"name" : "31529",
"refsource" : "BID",
"url" : "http://www.securityfocus.com/bid/31529"
},
{
"name" : "oval:org.mitre.oval:def:5670",
"refsource" : "OVAL",
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670"
},
{
"name" : "32133",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/32133"
},
{
"name" : "ADV-2008-2750",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2008/2750"
},
{
"name" : "ADV-2008-2751",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2008/2751"
},
{
"name" : "ADV-2008-2752",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2008/2752"
},
{
"name" : "1020968",
"refsource" : "SECTRACK",
"url" : "http://securitytracker.com/id?1020968"
},
{
"name" : "1021109",
"refsource" : "SECTRACK",
"url" : "http://www.securitytracker.com/id?1021109"
},
{
"name" : "1021132",
"refsource" : "SECTRACK",
"url" : "http://www.securitytracker.com/id?1021132"
},
{
"name" : "32112",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/32112"
},
{
"name" : "32117",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/32117"
},
{
"name" : "32116",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/32116"
},
{
"name" : "32406",
"refsource" : "SECUNIA",
"url" : "http://secunia.com/advisories/32406"
},
{
"name" : "ADV-2009-0633",
"refsource" : "VUPEN",
"url" : "http://www.vupen.com/english/advisories/2009/0633"
},
{
"name" : "multiple-vendors-ndp-dos(45601)",
"refsource" : "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/45601"
}
]
}
}