{"api_version":"1","generated_at":"2026-07-23T04:57:06+00:00","cve":"CVE-2008-2476","urls":{"html":"https://cve.report/CVE-2008-2476","api":"https://cve.report/api/cve/CVE-2008-2476.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-2476","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-2476"},"summary":{"title":"CVE-2008-2476","description":"The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).","state":"PUBLISHED","assigner":"certcc","published_at":"2008-10-03 15:07:10","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.kb.cert.org/vuls/id/472363","name":"http://www.kb.cert.org/vuls/id/472363","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#472363","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/0633","name":"http://www.vupen.com/english/advisories/2009/0633","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"inode/x-empty","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2751","name":"http://www.vupen.com/english/advisories/2008/2751","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"inode/x-empty","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32117","name":"http://secunia.com/advisories/32117","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Force10 FTOS Routers IPv6 Neighbor Discovery Protocol Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32133","name":"http://secunia.com/advisories/32133","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OpenBSD IPv6 Neighbor Discovery Protocol Neighbor Solicitation Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2750","name":"http://www.vupen.com/english/advisories/2008/2750","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"inode/x-empty","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021132","name":"http://www.securitytracker.com/id?1021132","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OpenBSD IPv6 Neighbor Discovery Protocol Spoofing Bug Lets Remote Users Modify Routing Data in Certain Cases - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1020968","name":"http://securitytracker.com/id?1020968","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - FreeBSD IPv6 Neighbor Discovery Protocol Spoofing Bug Lets Remote Users Modify Routing Data in Certain Cases","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc","name":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openbsd.org/errata43.html#006_ndp","name":"http://www.openbsd.org/errata43.html#006_ndp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OpenBSD 4.3 errata","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/2752","name":"http://www.vupen.com/english/advisories/2008/2752","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"inode/x-empty","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1021109","name":"http://www.securitytracker.com/id?1021109","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NetBSD IPv6 Neighbor Discovery Protocol Spoofing Bug Lets Remote Users Modify Routing Data in Certain Cases - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view","name":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Juniper Networks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32116","name":"http://secunia.com/advisories/32116","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7","name":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"Force10 Networks, Inc. Information for VU#472363","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32112","name":"http://secunia.com/advisories/32112","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"FreeBSD IPv6 Neighbor Discovery Protocol Neighbor Solicitation Vulnerability - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/32406","name":"http://secunia.com/advisories/32406","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NetBSD IPv6 Neighbor Discovery Protocol Neighbor Solicitation Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68","name":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"Wind River Systems, Inc. Information for VU#472363","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openbsd.org/errata42.html#015_ndp","name":"http://www.openbsd.org/errata42.html#015_ndp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"OpenBSD 4.2 errata","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/31529","name":"http://www.securityfocus.com/bid/31529","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Multiple Vendors IPv6 Neighbor Discovery Protocol Implementation Address Spoofing Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc","name":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT3467","name":"http://support.apple.com/kb/HT3467","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About the security content of Time Capsule and AirPort Base Station (802.11n*) Firmware 7.4.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-2476","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2476","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"force10","cpe5":"ftos","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"juniper","cpe5":"jnos","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"netbsd","cpe5":"netbsd","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"openbsd","cpe5":"openbsd","cpe6":"4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"openbsd","cpe5":"openbsd","cpe6":"4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"windriver","cpe5":"vxworks","cpe6":"5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"windriver","cpe5":"vxworks","cpe6":"5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"2476","vulnerable":"1","versionEndIncluding":"6.4","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"windriver","cpe5":"vxworks","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2008-2476","organization":"Red Hat","lastmodified":"2017-09-28","contributor":"Joshua Bressers","statementText":"Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, 5 or Red Hat Enterprise MRG.","cve_year":"2008","cve_id":"2476","crc32":"58c77f6b"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:05:29.861Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"32406","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32406"},{"name":"multiple-vendors-ndp-dos(45601)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT3467"},{"name":"[4.2] 015: SECURITY FIX: October 2, 2008","tags":["vendor-advisory","x_refsource_OPENBSD","x_transferred"],"url":"http://www.openbsd.org/errata42.html#015_ndp"},{"name":"ADV-2008-2751","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2751"},{"name":"1021109","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021109"},{"name":"1020968","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1020968"},{"name":"32133","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32133"},{"name":"VU#472363","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/472363"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7"},{"name":"32116","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32116"},{"name":"1021132","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1021132"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view"},{"name":"ADV-2008-2750","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2750"},{"name":"ADV-2008-2752","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/2752"},{"name":"31529","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/31529"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68"},{"name":"FreeBSD-SA-08:10","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc"},{"name":"[4.3] 006: SECURITY FIX: October 2, 2008","tags":["vendor-advisory","x_refsource_OPENBSD","x_transferred"],"url":"http://www.openbsd.org/errata43.html#006_ndp"},{"name":"32112","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32112"},{"name":"NetBSD-SA2008-013","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred"],"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc"},{"name":"oval:org.mitre.oval:def:5670","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670"},{"name":"32117","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/32117"},{"name":"ADV-2009-0633","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/0633"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-10-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"name":"32406","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32406"},{"name":"multiple-vendors-ndp-dos(45601)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT3467"},{"name":"[4.2] 015: SECURITY FIX: October 2, 2008","tags":["vendor-advisory","x_refsource_OPENBSD"],"url":"http://www.openbsd.org/errata42.html#015_ndp"},{"name":"ADV-2008-2751","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2751"},{"name":"1021109","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021109"},{"name":"1020968","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1020968"},{"name":"32133","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32133"},{"name":"VU#472363","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/472363"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7"},{"name":"32116","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32116"},{"name":"1021132","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1021132"},{"tags":["x_refsource_MISC"],"url":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view"},{"name":"ADV-2008-2750","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2750"},{"name":"ADV-2008-2752","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/2752"},{"name":"31529","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/31529"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68"},{"name":"FreeBSD-SA-08:10","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc"},{"name":"[4.3] 006: SECURITY FIX: October 2, 2008","tags":["vendor-advisory","x_refsource_OPENBSD"],"url":"http://www.openbsd.org/errata43.html#006_ndp"},{"name":"32112","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32112"},{"name":"NetBSD-SA2008-013","tags":["vendor-advisory","x_refsource_NETBSD"],"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc"},{"name":"oval:org.mitre.oval:def:5670","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670"},{"name":"32117","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/32117"},{"name":"ADV-2009-0633","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/0633"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2008-2476","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"32406","refsource":"SECUNIA","url":"http://secunia.com/advisories/32406"},{"name":"multiple-vendors-ndp-dos(45601)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/45601"},{"name":"http://support.apple.com/kb/HT3467","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT3467"},{"name":"[4.2] 015: SECURITY FIX: October 2, 2008","refsource":"OPENBSD","url":"http://www.openbsd.org/errata42.html#015_ndp"},{"name":"ADV-2008-2751","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2751"},{"name":"1021109","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021109"},{"name":"1020968","refsource":"SECTRACK","url":"http://securitytracker.com/id?1020968"},{"name":"32133","refsource":"SECUNIA","url":"http://secunia.com/advisories/32133"},{"name":"VU#472363","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/472363"},{"name":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7","refsource":"CONFIRM","url":"http://www.kb.cert.org/vuls/id/MAPG-7H2RY7"},{"name":"32116","refsource":"SECUNIA","url":"http://secunia.com/advisories/32116"},{"name":"1021132","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1021132"},{"name":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view","refsource":"MISC","url":"https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view"},{"name":"ADV-2008-2750","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2750"},{"name":"ADV-2008-2752","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/2752"},{"name":"31529","refsource":"BID","url":"http://www.securityfocus.com/bid/31529"},{"name":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68","refsource":"CONFIRM","url":"http://www.kb.cert.org/vuls/id/MAPG-7H2S68"},{"name":"FreeBSD-SA-08:10","refsource":"FREEBSD","url":"http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc"},{"name":"[4.3] 006: SECURITY FIX: October 2, 2008","refsource":"OPENBSD","url":"http://www.openbsd.org/errata43.html#006_ndp"},{"name":"32112","refsource":"SECUNIA","url":"http://secunia.com/advisories/32112"},{"name":"NetBSD-SA2008-013","refsource":"NETBSD","url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc"},{"name":"oval:org.mitre.oval:def:5670","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670"},{"name":"32117","refsource":"SECUNIA","url":"http://secunia.com/advisories/32117"},{"name":"ADV-2009-0633","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/0633"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2008-2476","datePublished":"2008-10-03T15:00:00.000Z","dateReserved":"2008-05-28T00:00:00.000Z","dateUpdated":"2024-08-07T09:05:29.861Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-10-03 15:07:10","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:force10:ftos:*:*:*:*:*:*:*:*","matchCriteriaId":"4941A848-A02E-4234-82A3-076AABC94476"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F702C46F-CA02-4FA2-B7D6-C61C2C095679"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*","matchCriteriaId":"803EFA9F-B7CB-4511-B1C1-381170CA9A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:jnos:*:*:*:*:*:*:*:*","matchCriteriaId":"9BD3413A-DD12-4C60-88F4-E2D6C1264319"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9DF8DD37-A337-4E9D-A34E-C2D561A24285"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F12313A0-1EAF-4652-9AB1-799171CFFEA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","matchCriteriaId":"DFCBBA4F-BD05-4044-98A0-2825A413D299"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:5:*:*:*:*:*:*:*","matchCriteriaId":"F69B80D9-E6A6-4761-9EE3-3EF5E55EFA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:5.5:*:*:*:*:*:*:*","matchCriteriaId":"FE3680A0-7B0C-4E91-97D7-B3F33EE1569A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"2476","Ordinal":"1","Title":"CVE-2008-2476","CVE":"CVE-2008-2476","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"2476","Ordinal":"1","NoteData":"The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).","Type":"Description","Title":"CVE-2008-2476"},{"CveYear":"2008","CveId":"2476","Ordinal":"2","NoteData":"2008-10-03","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"2476","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}