CVE-2008-4404 The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service...
HighCVSS 10.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service (loss of connectivity) or read private network traffic via a spoofed message that modifies the Forward Information Base (FIB), a related issue to CVE-2008-2476.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm zseries | All versions | No fix listed |
References
- VU#472363 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource