ByteOS Network

Vulnerability Details :

CVE-2008-2476

Assigner-certcc

Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b

Published At-03 Oct, 2008 | 15:00

Updated At-07 Aug, 2024 | 09:05

The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:certcc

Assigner Org ID:37e5125f-f79b-445b-8fad-9564f167944b

Published At:03 Oct, 2008 | 15:00

Updated At:07 Aug, 2024 | 09:05

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/32406	third-party-advisory x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/45601	vdb-entry x_refsource_XF
http://support.apple.com/kb/HT3467	x_refsource_CONFIRM
http://www.openbsd.org/errata42.html#015_ndp	vendor-advisory x_refsource_OPENBSD
http://www.vupen.com/english/advisories/2008/2751	vdb-entry x_refsource_VUPEN
http://www.securitytracker.com/id?1021109	vdb-entry x_refsource_SECTRACK
http://securitytracker.com/id?1020968	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/32133	third-party-advisory x_refsource_SECUNIA
http://www.kb.cert.org/vuls/id/472363	third-party-advisory x_refsource_CERT-VN
http://www.kb.cert.org/vuls/id/MAPG-7H2RY7	x_refsource_CONFIRM
http://secunia.com/advisories/32116	third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1021132	vdb-entry x_refsource_SECTRACK
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view	x_refsource_MISC
http://www.vupen.com/english/advisories/2008/2750	vdb-entry x_refsource_VUPEN
http://www.vupen.com/english/advisories/2008/2752	vdb-entry x_refsource_VUPEN
http://www.securityfocus.com/bid/31529	vdb-entry x_refsource_BID
http://www.kb.cert.org/vuls/id/MAPG-7H2S68	x_refsource_CONFIRM
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc	vendor-advisory x_refsource_FREEBSD
http://www.openbsd.org/errata43.html#006_ndp	vendor-advisory x_refsource_OPENBSD
http://secunia.com/advisories/32112	third-party-advisory x_refsource_SECUNIA
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc	vendor-advisory x_refsource_NETBSD
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670	vdb-entry signature x_refsource_OVAL
http://secunia.com/advisories/32117	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0633	vdb-entry x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/32406

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/45601

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://support.apple.com/kb/HT3467

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openbsd.org/errata42.html#015_ndp

Resource:

vendor-advisory

x_refsource_OPENBSD

Hyperlink: http://www.vupen.com/english/advisories/2008/2751

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securitytracker.com/id?1021109

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://securitytracker.com/id?1020968

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://secunia.com/advisories/32133

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.kb.cert.org/vuls/id/472363

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://www.kb.cert.org/vuls/id/MAPG-7H2RY7

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/32116

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securitytracker.com/id?1021132

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view

Resource:

x_refsource_MISC

Hyperlink: http://www.vupen.com/english/advisories/2008/2750

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.vupen.com/english/advisories/2008/2752

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securityfocus.com/bid/31529

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.kb.cert.org/vuls/id/MAPG-7H2S68

Resource:

x_refsource_CONFIRM

Hyperlink: http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc

Resource:

vendor-advisory

x_refsource_FREEBSD

Hyperlink: http://www.openbsd.org/errata43.html#006_ndp

Resource:

vendor-advisory

x_refsource_OPENBSD

Hyperlink: http://secunia.com/advisories/32112

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc

Resource:

vendor-advisory

x_refsource_NETBSD

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://secunia.com/advisories/32117

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2009/0633

Resource:

vdb-entry

x_refsource_VUPEN

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/32406	third-party-advisory x_refsource_SECUNIA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/45601	vdb-entry x_refsource_XF x_transferred
http://support.apple.com/kb/HT3467	x_refsource_CONFIRM x_transferred
http://www.openbsd.org/errata42.html#015_ndp	vendor-advisory x_refsource_OPENBSD x_transferred
http://www.vupen.com/english/advisories/2008/2751	vdb-entry x_refsource_VUPEN x_transferred
http://www.securitytracker.com/id?1021109	vdb-entry x_refsource_SECTRACK x_transferred
http://securitytracker.com/id?1020968	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/32133	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.kb.cert.org/vuls/id/472363	third-party-advisory x_refsource_CERT-VN x_transferred
http://www.kb.cert.org/vuls/id/MAPG-7H2RY7	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/32116	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securitytracker.com/id?1021132	vdb-entry x_refsource_SECTRACK x_transferred
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view	x_refsource_MISC x_transferred
http://www.vupen.com/english/advisories/2008/2750	vdb-entry x_refsource_VUPEN x_transferred
http://www.vupen.com/english/advisories/2008/2752	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/bid/31529	vdb-entry x_refsource_BID x_transferred
http://www.kb.cert.org/vuls/id/MAPG-7H2S68	x_refsource_CONFIRM x_transferred
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc	vendor-advisory x_refsource_FREEBSD x_transferred
http://www.openbsd.org/errata43.html#006_ndp	vendor-advisory x_refsource_OPENBSD x_transferred
http://secunia.com/advisories/32112	third-party-advisory x_refsource_SECUNIA x_transferred
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc	vendor-advisory x_refsource_NETBSD x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/32117	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2009/0633	vdb-entry x_refsource_VUPEN x_transferred

Hyperlink: http://secunia.com/advisories/32406

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/45601

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://support.apple.com/kb/HT3467

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.openbsd.org/errata42.html#015_ndp

Resource:

vendor-advisory

x_refsource_OPENBSD

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2751

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securitytracker.com/id?1021109

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://securitytracker.com/id?1020968

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://secunia.com/advisories/32133

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/472363

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/MAPG-7H2RY7

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/32116

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securitytracker.com/id?1021132

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2750

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2752

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/bid/31529

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/MAPG-7H2S68

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc

Resource:

vendor-advisory

x_refsource_FREEBSD

x_transferred

Hyperlink: http://www.openbsd.org/errata43.html#006_ndp

Resource:

vendor-advisory

x_refsource_OPENBSD

x_transferred

Hyperlink: http://secunia.com/advisories/32112

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc

Resource:

vendor-advisory

x_refsource_NETBSD

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://secunia.com/advisories/32117

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/0633

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cret@cert.org

Published At:03 Oct, 2008 | 15:07

Updated At:23 Apr, 2026 | 00:35

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2017-09-28T21:31:11.053

Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.

References

Hyperlink	Source	Resource
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc	cret@cert.org	N/A
http://secunia.com/advisories/32112	cret@cert.org	Vendor Advisory
http://secunia.com/advisories/32116	cret@cert.org	N/A
http://secunia.com/advisories/32117	cret@cert.org	Vendor Advisory
http://secunia.com/advisories/32133	cret@cert.org	N/A
http://secunia.com/advisories/32406	cret@cert.org	N/A
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc	cret@cert.org	Vendor Advisory
http://securitytracker.com/id?1020968	cret@cert.org	N/A
http://support.apple.com/kb/HT3467	cret@cert.org	N/A
http://www.kb.cert.org/vuls/id/472363	cret@cert.org	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2RY7	cret@cert.org	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2S68	cret@cert.org	US Government Resource
http://www.openbsd.org/errata42.html#015_ndp	cret@cert.org	N/A
http://www.openbsd.org/errata43.html#006_ndp	cret@cert.org	N/A
http://www.securityfocus.com/bid/31529	cret@cert.org	N/A
http://www.securitytracker.com/id?1021109	cret@cert.org	N/A
http://www.securitytracker.com/id?1021132	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2008/2750	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2008/2751	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2008/2752	cret@cert.org	N/A
http://www.vupen.com/english/advisories/2009/0633	cret@cert.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45601	cret@cert.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670	cret@cert.org	N/A
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view	cret@cert.org	N/A
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/32112	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32116	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/32117	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32133	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/32406	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1020968	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.apple.com/kb/HT3467	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/472363	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2RY7	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2S68	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.openbsd.org/errata42.html#015_ndp	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openbsd.org/errata43.html#006_ndp	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/31529	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1021109	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1021132	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/2750	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/2751	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/2752	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2009/0633	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45601	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/32112

Source: cret@cert.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32116

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/32117

Source: cret@cert.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32133

Source: cret@cert.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/32406

Source: cret@cert.org

Resource: N/A

Hyperlink: http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc

Source: cret@cert.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1020968

Source: cret@cert.org

Resource: N/A

Hyperlink: http://support.apple.com/kb/HT3467

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.kb.cert.org/vuls/id/472363

Source: cret@cert.org

Resource:

US Government Resource

Hyperlink: http://www.kb.cert.org/vuls/id/MAPG-7H2RY7

Source: cret@cert.org

Resource:

US Government Resource

Hyperlink: http://www.kb.cert.org/vuls/id/MAPG-7H2S68

Source: cret@cert.org

Resource:

US Government Resource

Hyperlink: http://www.openbsd.org/errata42.html#015_ndp

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.openbsd.org/errata43.html#006_ndp

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/31529

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1021109

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1021132

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/2750

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/2751

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/2752

Source: cret@cert.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2009/0633

Source: cret@cert.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/45601

Source: cret@cert.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670

Source: cret@cert.org

Resource: N/A

Hyperlink: https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view

Source: cret@cert.org

Resource: N/A

Hyperlink: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc