CVE ID:	CVE-2008-2476
Description:	The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).
Test IDs:	1.3.6.1.4.1.25623.1.0.61702
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2476 BugTraq ID: 31529 http://www.securityfocus.com/bid/31529 CERT/CC vulnerability note: VU#472363 http://www.kb.cert.org/vuls/id/472363 FreeBSD Security Advisory: FreeBSD-SA-08:10 http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view NETBSD Security Advisory: NetBSD-SA2008-013 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc OpenBSD Security Advisory: [4.2] 015: SECURITY FIX: October 2, 2008 http://www.openbsd.org/errata42.html#015_ndp OpenBSD Security Advisory: [4.3] 006: SECURITY FIX: October 2, 2008 http://www.openbsd.org/errata43.html#006_ndp https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670 http://securitytracker.com/id?1020968 http://www.securitytracker.com/id?1021109 http://www.securitytracker.com/id?1021132 http://secunia.com/advisories/32112 http://secunia.com/advisories/32116 http://secunia.com/advisories/32117 http://secunia.com/advisories/32133 http://secunia.com/advisories/32406 http://www.vupen.com/english/advisories/2008/2750 http://www.vupen.com/english/advisories/2008/2751 http://www.vupen.com/english/advisories/2008/2752 http://www.vupen.com/english/advisories/2009/0633 XForce ISS Database: multiple-vendors-ndp-dos(45601) https://exchange.xforce.ibmcloud.com/vulnerabilities/45601