Notified:  May 09, 2007 Updated: May 14, 2007

Status

Affected

Vendor Statement

AlaxalA AX series (except AX1200S/AX2400S series) and Hitachi GR4000/GR2000/GS4000/GS3000 are vulnerable to this issue. Note that AlaxalA AX series (except AX1200S/AX2400S series) and Hitachi GR4000/GR2000/GS4000/GS3000 have a threshold mechanism to ignore IPv6 Routing Header Type 0. This mechanism limits the impact of possible attacks.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Notified:  May 09, 2007 Updated: June 15, 2007

Status

Affected

Vendor Statement

Sidewinder G2, Sidewinder 7, and TSP: Not Vulnerable By default, Sidewinder ignores routing header 0, and strips it from datagrams passing through the firewall. TSP drops IPv6 datagrams containing routing headers. SnapGear: Vulnerable SnapGear products at version 3.1.5 and earlier honor IPv6 routing header 0. This will be corrected in an upcoming release. This vulnerability is not relevant to any other Secure Computing products.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Notified:  May 09, 2007 Updated: May 17, 2007

Statement Date:   May 16, 2007

Status

Affected

Vendor Statement

Sun can confirm that while Solaris has support for the IPv6 Routing Header type 0 that is described in VU#267289, packets containing this header extension are discarded by default on Solaris 9 and 10, and Solaris 8 can be configured to discard them by setting a kernel driver parameter. For Solaris systems, this setting is controlled by the ip6_forward_src_routed kernel driver parameter, which defaults to 1 on Solaris 8 systems, and 0 on later systems. The 'ndd(1M)' command can be used to set this variable, for example to set it for the current session the command could be used as follows: # ndd -set /dev/ip ip6_forward_src_routed 0 More details are available from the following blog post: http://blogs.sun.com/security/entry/ipv6_routing_header_issues

Vendor Information

We are not aware of further vendor information regarding this vulnerability.