CVE-2009-2208: Freebsd

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.

Affected products

• Freebsd Freebsd: version 6.3 only; version 6.3_releng only; version 6.4 only; version 7.1 only; version 7.2 only

Published 2009-06-25. Last modified 2026-06-16.