VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 3, 2008· Updated Jun 16, 2026

CVE-2008-2476

CVE-2008-2476

Description

The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Force10/Ftos2 versions
    cpe:2.3:o:force10:ftos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:force10:ftos:*:*:*:*:*:*:*:*
    • (no CPE)range: <E7.7.1.1
  • FreeBSD/FreeBSD3 versions
    cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*
    • (no CPE)range: 6.3 - 7.1
  • Juniper Networks/Jnos
    cpe:2.3:o:juniper:jnos:*:*:*:*:*:*:*:*
  • NetBSD/NetBSD2 versions
    cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*
    • (no CPE)
  • OpenBSD/OpenBSD3 versions
    cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:openbsd:openbsd:4.2:*:*:*:*:*:*:*
    • cpe:2.3:o:openbsd:openbsd:4.3:*:*:*:*:*:*:*
    • (no CPE)range: 4.2 - 4.3
  • Windriver/Vxworks4 versions
    cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*range: <=6.4
    • cpe:2.3:o:windriver:vxworks:5:*:*:*:*:*:*:*
    • cpe:2.3:o:windriver:vxworks:5.5:*:*:*:*:*:*:*
    • (no CPE)range: 5.x - 6.4
  • Juniper Networks/Junosllm-fuzzy

Patches

Vulnerability mechanics

References

24

News mentions

0

No linked articles in our index yet.