CVE-2009-2208

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-25 · updated 2026-06-16
Weakness: CWE-264

Description

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

Affected products

FreeBSD: 6.3, 6.3-release_p10, 6.3-release_p11, 6.3-release_p6, 6.3-release_p8, 6.3-release_p9 (+20)

References

http://secunia.com/advisories/35410
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
http://www.securityfocus.com/bid/35285
http://www.securitytracker.com/id?1022367
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044
http://secunia.com/advisories/35410
http://security.FreeBSD.org/advisories/FreeBSD-SA-09:10.ipv6.asc
http://www.securityfocus.com/bid/35285
http://www.securitytracker.com/id?1022367
https://exchange.xforce.ibmcloud.com/vulnerabilities/51044

Get alerted when CVE-2009-2208 or the next vulnerability affects your stack