Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

RCE via ND6 Router Advertisements in FreeBSD

freebsd.org

Post reply on HN
Print view View original

1–10 of 85 posts

Re: RCE via ND6 Router Advertisements in FreeBSD

#2

Post by _f9cu »

is my understanding right?

"PC or computers or hardware that uses OS that consume FreeBSD, has a faulty software for the router's firmware?"

"The router's software performs ad distributions?"

"The version of internet, the router uses, is updated, whereas, the target machine, or the user's machine is still running a old version"

"The security patch works for the modern but not the precursor version?"

"This leaves older systems obsolete in the market?"

"is this a step-by-step instructions to business owners to introduce new products, selling that older products are obsolete" ?

Re: RCE via ND6 Router Advertisements in FreeBSD

#3

Post by eptcyka »

_f9cu wrote: post #2

is my understanding right? "PC or computers or hardware that uses OS that consume FreeBSD, has a faulty software for the router's firmware?" "The router's software performs ad distributions?" "The version of internet, the router uses, is updated, whereas, the target machine, or the user's machine is still running a old version" "The security patch works for the modern but not the precursor version?" "This leaves olde…

No, I don't think you are understanding this right, but there are some good questions you are asking. Where is the flag button?

If you are a real human, the most interesting question you're bringing up is What about all the appliances backed by FreeBSD? Yes, they are obsolete if they use IPv6 and accept RAs and if they don't get updates.

Re: RCE via ND6 Router Advertisements in FreeBSD

#5

Post by TekMol » 

    vulnerable to remote code execution from
    systems on the same network segment
Isn't almost every laptop these days autoconnecting to known network names like "Starbucks" etc, because the user used it once in the past?

That would mean that every FreeBSD laptop in proximity of an attacker is vulnerable, right? Since the attacker could just create a hotspot with the SSID "Starbucks" on their laptop and the victim's laptop will connect to it automatically.

Re: RCE via ND6 Router Advertisements in FreeBSD

#6

Post by jacquesm »

eptcyka wrote: post #3
_f9cu wrote: post #2

is my understanding right? "PC or computers or hardware that uses OS that consume FreeBSD, has a faulty software for the router's firmware?" "The router's software performs ad distributions?" "The version of internet, the router uses, is updated, whereas, the target machine, or the user's machine is still running a old version" "The security patch works for the modern but not the precursor version?" "This leaves olde…

No, I don't think you are understanding this right, but there are some good questions you are asking. Where is the flag button? If you are a real human, the most interesting question you're bringing up is What about all the appliances backed by FreeBSD? Yes, they are obsolete if they use IPv6 and accept RAs and if they don't get updates.

That was my first thought, if this is an embedded system without an update path this will be super hard to solve. People usually are not even aware of what OS their appliances run under the hood and whether or not they are updated automatically and how to update them if they are not.

Re: RCE via ND6 Router Advertisements in FreeBSD

#10

Post by francasso »

TekMol wrote: post #5

vulnerable to remote code execution from systems on the same network segment Isn't almost every laptop these days autoconnecting to known network names like "Starbucks" etc, because the user used it once in the past? That would mean that every FreeBSD laptop in proximity of an attacker is vulnerable, right? Since the attacker could just create a hotspot with the SSID "Starbucks" on their laptop and the victim's lapto…

If you run FreeBSD on your laptop you don't auto connect to public WiFi.

Joking, but not that much :)

Post reply on HN