The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/472363 | US Government Resource |
http://www.kb.cert.org/vuls/id/MAPG-7H2RZ8 | US Government Resource |
Configurations
History
No history.
Information
Published : 2008-10-03 15:07
Updated : 2024-02-04 17:33
NVD link : CVE-2008-4404
Mitre link : CVE-2008-4404
CVE.ORG link : CVE-2008-4404
JSON object : View
Products Affected
ibm
- zseries
CWE
CWE-20
Improper Input Validation