From owner-freebsd-security@FreeBSD.ORG  Fri Apr 27 05:55:04 2007
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 8C18C16A402
	for <freebsd-security@freebsd.org>;
	Fri, 27 Apr 2007 05:55:04 +0000 (UTC)
	(envelope-from y-koga@jp.FreeBSD.org)
Received: from [127.0.0.1] (hiiro.mesh.ad.jp [133.205.63.232])
	by mx1.freebsd.org (Postfix) with ESMTP id 3662213C448
	for <freebsd-security@freebsd.org>;
	Fri, 27 Apr 2007 05:55:04 +0000 (UTC)
	(envelope-from y-koga@jp.FreeBSD.org)
Received: from [127.0.0.1] (localhost [127.0.0.1]) (authenticated bits=0)
	(envelope-from y-koga@jp.FreeBSD.org)
	by [127.0.0.1] (8.14.1/8.14.1) with ESMTP id l3R5Vvt7007112
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Fri, 27 Apr 2007 14:31:59 +0900 (JST)
Date: Fri, 27 Apr 2007 14:31:56 +0900 (JST)
Message-Id: <20070427.143156.87001849.y-koga@jp.FreeBSD.org>
To: freebsd-security@freebsd.org
From: Koga Youichirou <y-koga@jp.FreeBSD.org>
In-Reply-To: <200704262349.l3QNnmro085350@freefall.freebsd.org>
References: <200704262349.l3QNnmro085350@freefall.freebsd.org>
X-Mailer: Mew version 5.2 on Emacs 21.3.50 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-07:03.ipv6
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Apr 2007 05:55:04 -0000

> =============================================================================
> FreeBSD-SA-07:03.ipv6                                       Security Advisory
>                                                           The FreeBSD Project
> 
> Topic:          IPv6 Routing Header 0 is dangerous
- snip -
> I.   Background
> 
> IPv6 provides a routing header option which allows a packet sender to
> indicate how the packet should be routed, overriding the routing knowledge
> present in a network.  This functionality is roughly equivalent to the
> "source routing" option in IPv4.  All nodes in an IPv6 network -- both
> routers and hosts -- are required by RFC 2640 to process such headers.

s/RFC 2640/RFC 2460/

Regards,

-- Koga, Youichirou