VULNERABILITY INTELLIGENCE

CVE-2009-2208

CVSS score3.6 NONE
EPSS probability0.35%
CISA KEVNot currently listed
Published2009-06-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P

Description

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

Weakness classification

  • nvd@nist.gov: CWE-264

Primary references