Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2008-2476 Details

Description

The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc	CVE
http://secunia.com/advisories/32112	CVE	Vendor Advisory
http://secunia.com/advisories/32116	CVE
http://secunia.com/advisories/32117	CVE	Vendor Advisory
http://secunia.com/advisories/32133	CVE
http://secunia.com/advisories/32406	CVE
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc	CVE	Vendor Advisory
http://securitytracker.com/id?1020968	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/45601	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670	CVE
http://support.apple.com/kb/HT3467	CVE
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view	CVE
http://www.kb.cert.org/vuls/id/472363	CVE	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2RY7	CVE	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2S68	CVE	US Government Resource
http://www.openbsd.org/errata42.html#015_ndp	CVE
http://www.openbsd.org/errata43.html#006_ndp	CVE
http://www.securityfocus.com/bid/31529	CVE
http://www.securitytracker.com/id?1021109	CVE
http://www.securitytracker.com/id?1021132	CVE
http://www.vupen.com/english/advisories/2008/2750	CVE
http://www.vupen.com/english/advisories/2008/2751	CVE
http://www.vupen.com/english/advisories/2008/2752	CVE
http://www.vupen.com/english/advisories/2009/0633	CVE
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc	[email protected]
http://secunia.com/advisories/32112	[email protected]	Vendor Advisory
http://secunia.com/advisories/32116	[email protected]
http://secunia.com/advisories/32117	[email protected]	Vendor Advisory
http://secunia.com/advisories/32133	[email protected]
http://secunia.com/advisories/32406	[email protected]
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc	[email protected]	Vendor Advisory
http://securitytracker.com/id?1020968	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/45601	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670	[email protected]
http://support.apple.com/kb/HT3467	[email protected]
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2008-09-036&viewMode=view	[email protected]
http://www.kb.cert.org/vuls/id/472363	[email protected]	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2RY7	[email protected]	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-7H2S68	[email protected]	US Government Resource
http://www.openbsd.org/errata42.html#015_ndp	[email protected]
http://www.openbsd.org/errata43.html#006_ndp	[email protected]
http://www.securityfocus.com/bid/31529	[email protected]
http://www.securitytracker.com/id?1021109	[email protected]
http://www.securitytracker.com/id?1021132	[email protected]
http://www.vupen.com/english/advisories/2008/2750	[email protected]
http://www.vupen.com/english/advisories/2008/2751	[email protected]
http://www.vupen.com/english/advisories/2008/2752	[email protected]
http://www.vupen.com/english/advisories/2009/0633	[email protected]

see all 48 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
force10 ftos	All versions
CPE cpe:2.3:o:force10:ftos:::::::: Remediation No remediation found in references.
freebsd freebsd	6.3 7.1
CPE cpe:2.3:o:freebsd:freebsd:6.3:::::::* cpe:2.3:o:freebsd:freebsd:7.1:::::::* Remediation No remediation found in references.
juniper jnos	All versions
CPE cpe:2.3:o:juniper:jnos:::::::: Remediation No remediation found in references.
netbsd netbsd	All versions
CPE cpe:2.3:o:netbsd:netbsd:::::::: Remediation No remediation found in references.
openbsd openbsd	4.2 4.3
CPE cpe:2.3:o:openbsd:openbsd:4.2:::::::* cpe:2.3:o:openbsd:openbsd:4.3:::::::* Remediation No remediation found in references.
windriver vxworks	<= 6.4 5 5.5
CPE cpe:2.3:o:windriver:vxworks:::::::: cpe:2.3:o:windriver:vxworks:5:::::::* cpe:2.3:o:windriver:vxworks:5.5:::::::* Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 29, 2017	CVE Modified	[email protected]
Aug 8, 2017	CVE Modified	[email protected]
Oct 3, 2008	Initial Analysis	[email protected]

CVE-2008-2476 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO