A vulnerability has been reported in FreeBSD, which can be exploited by malicious people to conduct spoofing attacks, disclose potentially sensitive information, or to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the implementation of the Neighbor Discovery protocol when processing neighbor solicitation requests. This can be exploited to add a fake entry to the router's neighbor cache via a neighbor solicitation request containing a spoofed IPv6 address.

Successful exploitation may allow the interception or disruption of network traffic, but requires that the IPv6 nodes involved in the attack are using the same router.

Solution
Update FreeBSD or apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits David Miles.

Original Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-08:10.nd6.asc

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers