FreeBSD IPv6 'SIOCSIFINFO_IN6'权限检查本地安全绕过漏洞

Bugraq ID: 35285 CNCAN ID：CNCAN-2009061102 FreeBSD是一款开放源代码的BSD操作系统。 FreeBSD针对&quot;SIOCSIFINFO_IN6&quot; IOCTL缺少正确的权限检查，本地攻击者可以利用漏洞修改网络设置导致拒绝服务等攻击。 当修改IPv6网络栈属性时缺少正确的权限检查，发送特殊构建的&quot;SIOCSIFINFO_IN6&quot; IOCTLs可导致更改部分IPv6接口设置(如MTU)或禁用IPv6接口。 FreeBSD FreeBSD 7.2-STABLE FreeBSD FreeBSD 7.1-RELEASE-p6 FreeBSD FreeBSD 7.1-RELEASE-p5 FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD FreeBSD 6.4-RELEASE-p5 FreeBSD FreeBSD 6.4-RELEASE-p4 FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD FreeBSD 6.4 -STABLE FreeBSD FreeBSD 6.4 -RELEASE-p3 FreeBSD FreeBSD 6.4 -RELEASE FreeBSD FreeBSD 6.3-RELEASE-p11 FreeBSD FreeBSD 6.3-RELEASE-p10 FreeBSD FreeBSD 6.3 -RELENG FreeBSD FreeBSD 6.3 -RELEASE-p9 FreeBSD FreeBSD 6.3 -RELEASE-p8 FreeBSD FreeBSD 6.3 -RELEASE-p6 FreeBSD FreeBSD 6.3 可参考如下补丁： FreeBSD FreeBSD 6.4 -STABLE FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3 -RELEASE-p6 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.4-RELEASE-p5 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3 -RELEASE-p8 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.4 -RELEASE-p3 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.4 -RELEASE FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.4-RELEASE-p4 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.4-RELEASE-p2 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3-RELEASE-p11 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 7.1-RELEASE-p6 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3-RELEASE-p10 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 7.1-RELEASE-p5 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 7.1-RELEASE-p4 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3 -RELENG FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 7.2-STABLE FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 7.1 -RELEASE-p1 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 6.3 -RELEASE-p9 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a> FreeBSD FreeBSD 7.1 -RELEASE-p2 FreeBSD ipv6-6.patch <a href="http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch" target="_blank" rel=external nofollow>http://security.FreeBSD.org/patches/SA-09:10/ipv6-6.patch</a>