Oh that's a nasty one, embedded FreeBSD users will have a hard time mitigating this.
The mitigation is applying the security patch, using static IPv6 addresses, or using a userspace client like dhcpcd.
RCE via ND6 Router Advertisements in FreeBSD
31–40 of 85 posts
Re: RCE via ND6 Router Advertisements in FreeBSD
#32Earlier quoted context omitted.
We had a soccer player in NL that was wildly popular and he had these funny remarks every now and then which got him nicknamed the most well known dutch philosopher. One of these was 'every advantage has its disadvantage', I guess this is one of those.
Ha! He was famous for that even when coaching in Spain
Is the op referring to J. Cruyff?
Re: RCE via ND6 Router Advertisements in FreeBSD
#33> no workaround
> IPv6 users that do not configure the system to accept router advertisement messages, are not affected.
Maybe I'm missing something but isnt that a workaround?
Re: RCE via ND6 Router Advertisements in FreeBSD
#34Earlier quoted context omitted.
My question was about known networks. As far as I know, access points only identify via their SSID. Which is a string like "Starbucks". So there is no way to tell if it is the real Starbucks WiFi or a hotspot some dude started on their laptop.
>So there is no way to tell if it is the real Starbucks WiFi or a hotspot some dude started on their laptop. Aka "unknown" or "public" Network....don't do that.
You don't use public networks?
And when you connect to a non-public WiFi for the first time - how do you make sure it is the WiFi you think it is and not some dude who spun up a hotspot on their laptop?
Re: RCE via ND6 Router Advertisements in FreeBSD
#35Earlier quoted context omitted.
My question was about known networks. As far as I know, access points only identify via their SSID. Which is a string like "Starbucks". So there is no way to tell if it is the real Starbucks WiFi or a hotspot some dude started on their laptop.
>So there is no way to tell if it is the real Starbucks WiFi or a hotspot some dude started on their laptop. Aka "unknown" or "public" Network....don't do that.
There is nothing wrong with using public networks. It's not 2010 anymore. Your operating system is expected to be fully secure[1] even when malicious actors are present in your local network.
[1] except availability, we still can't get it right in setups used by regular people.
Re: RCE via ND6 Router Advertisements in FreeBSD
#36Earlier quoted context omitted.
That's pretty standard where I am. Every Telstra router comes with IPv6 enabled.
As it should be. If your ISP isn't giving you ipv6, they're not giving you internet access and you should sue for your money back.
With such confidence in your comment, I'm sure you can point out many successful precedents for such cases.
Re: RCE via ND6 Router Advertisements in FreeBSD
#37Earlier quoted context omitted.
>So there is no way to tell if it is the real Starbucks WiFi or a hotspot some dude started on their laptop. Aka "unknown" or "public" Network....don't do that.
There is nothing wrong with using public networks. It's not 2010 anymore. Your operating system is expected to be fully secure[1] even when malicious actors are present in your local network. [1] except availability, we still can't get it right in setups used by regular people.
Unless you run FreeBSD, apparently
Re: RCE via ND6 Router Advertisements in FreeBSD
#38Having a shell script in the code path that processes router advertisements seems sub-optimal.
It's amazing the number of people that thing shell scripts should be anything other than throwaway single-person hacks.
They should probably go through their whole system and verify that there aren't more shell scripts being used, e.g. in the init system. Ideally a default distro would have zero shell scripts.