MNBSD-2009-7: Missing permission check on IPv6 SIOCSIFINFO_IN6 ioctl

Description

The SIOCSIFINFO_IN6 ioctl was missing a necessary permissions check, allowing any local user (including unprivileged users and users in jails) to change properties on IPv6 interfaces. The fix was applied to 0.2.1 (patch level p9) and 0.3-CURRENT; 0.3-CURRENT users with kern.osreldate 3005 or better had the patch. This corresponds to FreeBSD-SA-09:10.ipv6, announced the same day.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-09:10.ipv6.asc
• https://www.cve.org/CVERecord?id=CVE-2009-2208

Additional Information

Aliases: CVE-2009-2208

Published: June 10, 2009
Last Modified: June 10, 2009