SEIL Routers IPv6 Unicast RPF Spoofing Vulnerability

Bugtraq ID:	42741
Class:	Origin Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2010 12:00AM
Updated:	Aug 25 2010 12:00AM
Credit:	Reported by the vendor
Vulnerable:	SEIL SEIL/X2 2.52 SEIL SEIL/X2 2.51 SEIL SEIL/X2 2.50 SEIL SEIL/X2 2.49 SEIL SEIL/X2 2.48 SEIL SEIL/X2 2.47 SEIL SEIL/X2 2.46 SEIL SEIL/X2 2.45 SEIL SEIL/X2 2.44 SEIL SEIL/X2 2.43 SEIL SEIL/X2 2.42 SEIL SEIL/X2 2.41 SEIL SEIL/X2 2.40 SEIL SEIL/X1 2.52 SEIL SEIL/X1 2.51 SEIL SEIL/X1 2.50 SEIL SEIL/X1 2.49 SEIL SEIL/X1 2.48 SEIL SEIL/X1 2.47 SEIL SEIL/X1 2.46 SEIL SEIL/X1 2.45 SEIL SEIL/X1 2.44 SEIL SEIL/X1 2.43 SEIL SEIL/X1 2.42 SEIL SEIL/X1 2.41 SEIL SEIL/X1 2.40 SEIL SEIL/B1 2.60 SEIL SEIL/B1 2.52 SEIL SEIL/B1 2.51 SEIL SEIL/B1 2.50 SEIL SEIL/B1 2.48
Not Vulnerable:

SEIL Routers IPv6 Unicast RPF Spoofing Vulnerability

SEIL routers are prone to a spoofing vulnerability.

An attacker can exploit this issue to bypass the filtering of Unicast messages, which may aid in further attacks.

SEIL Routers IPv6 Unicast RPF Spoofing Vulnerability

Attackers can exploit this issue with readily available tools.

SEIL Routers IPv6 Unicast RPF Spoofing Vulnerability

Solution:
Updates are available; please see the references for more information.

SEIL Routers IPv6 Unicast RPF Spoofing Vulnerability

References:

• SEIL Homepage (Internet Initiative)
  
• IPv6 Unicast RPF feature Vulnerabilities (Internet Initiative)