Multiple Vendors IPv6 Router Advertisement Guard Evasion Security Bypass Vulnerability

Bugtraq ID:	49409
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2011 12:00AM
Updated:	Sep 01 2011 12:00AM
Credit:	SI6 Networks
Vulnerable:	HP A-Series Switch 0 Cisco Ios 12.2(33)SXI4
Not Vulnerable:

Multiple Vendors IPv6 Router Advertisement Guard Evasion Security Bypass Vulnerability

Multiple vendors products are prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass the security mechanisms built into an affected device. This may aid in further attacks.

Multiple Vendors IPv6 Router Advertisement Guard Evasion Security Bypass Vulnerability

An attacker can exploit this issue by using readily available network utilities.

Multiple Vendors IPv6 Router Advertisement Guard Evasion Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Vendors IPv6 Router Advertisement Guard Evasion Security Bypass Vulnerability

References:

• Router Advertisement Guard (RA-Guard) Evasion (SI6 Networks)
  
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: (Dan Luedtke )
  
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: (Fernando Gont )
  
• Re: [Full-disclosure] HP A-series switches are affected, too. [WAS: More on IPv (Dan Luedtke )