Multiple Vendors IPv6 Neighbor Discovery Protocol Implementation Address Spoofing Vulnerability

Threat level definition

Multiple Vendors IPv6 Neighbor Discovery Protocol Implementation Address Spoofing Vulnerability

References:

IPv6 Neighbor Discovery (ND) Trust Models and Threats (The Internet Engineering Task Force)
MidnightBSD Home Page (MidnightBSD)
Neighbor Discovery for IP Version 6 (IPv6) (The Internet Engineering Task Force)
Vulnerability Note VU#472363 IPv6 implementations insecurely update Forward Info (US-CERT)
006: SECURITY FIX: October 2, 2008 (OpenBSD)
015: SECURITY FIX: October 2, 2008 (OpenBSD)
About the security content of Time Capsule and AirPort Base Station (802.11n*) F (Apple)
ASA-2009-059 - HP-UX Running IPv6, Remote Denial of Service (DoS) and Unauthoriz (Avaya)
HPSBUX02407 SSRT080107 rev.1 - HP-UX Running IPv6, Remote Denial of Service (DoS (HP)
Juniper Networks, Inc. Information for VU#472363 (US-CERT)
November 2, 2008: The Neighbor Discovery Protocol (ndp) did not correctly verify (OpenBSD)
VU#472363 - IPv6 routing table vulnerability (US-CERT)

Privacy Statement
Copyright 2008, SecurityFocus