CVE:CVE-2010-2523
CNNVD:CNNVD-201007-130
UMIP 0.4中mipv6程序的ha.c存在多个缓冲溢出漏洞。远程攻击者可以借助伪造的(1)ND_OPT_PREFIX_INFORMATION或者(2)ND_OPT_HOME_AGENT_INFO包导致未明影响。
solution:Upgrade linux-ipv6 umip to a higher version than 0.4,and avoid the version 0.4