CVE-2009-2208

Published: Jun 25, 2009Modified: Apr 23, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

Affected (26)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 6.3
Freebsd Freebsd	Version 6.3 release_p10
Freebsd Freebsd	Version 6.3 release_p11
Freebsd Freebsd	Version 6.3 release_p6
Freebsd Freebsd	Version 6.3 release_p8
Freebsd Freebsd	Version 6.3 release_p9
Freebsd Freebsd	Version 6.3_releng
Freebsd Freebsd	Version 6.4
Freebsd Freebsd	Version 6.4 release
Freebsd Freebsd	Version 6.4 release_p2
Freebsd Freebsd	Version 6.4 release_p3
Freebsd Freebsd	Version 6.4 release_p4
Freebsd Freebsd	Version 6.4 release_p5
Freebsd Freebsd	Version 6.4 stable
Freebsd Freebsd	Version 7.1
Freebsd Freebsd	Version 7.1 pre-release
Freebsd Freebsd	Version 7.1 rc1
Freebsd Freebsd	Version 7.1 release-p1
Freebsd Freebsd	Version 7.1 release-p2
Freebsd Freebsd	Version 7.1 release-p4
Freebsd Freebsd	Version 7.1 release-p5
Freebsd Freebsd	Version 7.1 release-p6
Freebsd Freebsd	Version 7.1 stable
Freebsd Freebsd	Version 7.2
Freebsd Freebsd	Version 7.2 pre-release
Freebsd Freebsd	Version 7.2 stable