CVE-2009-0418 Information

Description

The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11 B.11.23 and B.11.31 does not validate the origin of Neighbor Discovery messages which allows remote attackers to cause a denial of service (loss of connectivity) read private network traffic and possibly execute arbitrary code via a spoofed message that modifies the Forward Information Base (FIB) a related issue to CVE-2008-2476.

Reference

http://marc.info/?l=bugtraq&m=123368621330334&w=2 http://secunia.com/advisories/33787 http://www.securitytracker.com/id?1021660 http://www.vupen.com/english/advisories/2009/0312 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A5943