Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.64205
Category:FreeBSD Local Security Checks
Title:FreeBSD Security Advisory (FreeBSD-SA-09:10.ipv6.asc)
Summary:The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-09:10.ipv6.asc
Description:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory FreeBSD-SA-09:10.ipv6.asc

Vulnerability Insight:
IPv6 is a new Internet Protocol, designed to replace (and avoid many of
the problems with) the current Internet Protocol (version 4). Many
properties of the FreeBSD IPv6 network stack can be configured via the
ioctl(2) interface.

The SIOCSIFINFO_IN6 ioctl is missing a necessary permissions check.

Solution:
Upgrade your system to the appropriate stable release
or security branch dated after the correction date.

CVSS Score:
3.6

CVSS Vector:
AV:L/AC:L/Au:N/C:N/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2009-2208
BugTraq ID: 35285
http://www.securityfocus.com/bid/35285
FreeBSD Security Advisory: FreeBSD-SA-09:10
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
http://www.securitytracker.com/id?1022367
http://secunia.com/advisories/35410
XForce ISS Database: freebsd-siocsifinfo-security-bypass(51044)
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
CopyrightCopyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.