Re: Linux kernel handling of IPv6 temporary addresses
From: David Miller <davem@davemloft.net>
Date: 2012-11-14 21:30:01
From: David Miller <davem@davemloft.net>
Date: 2012-11-14 21:30:01
From: George Kargiotakis <redacted> Date: Wed, 14 Nov 2012 23:14:11 +0200
Due to the way the Linux kernel handles the creation of IPv6 temporary addresses a malicious LAN user can remotely disable them altogether which may lead to privacy violations and information disclosure.
A malicious user who can emit random packets as root on your LAN can also corrupt your ARP cache with entries that point to the wrong MAC address. What's your point?