PT-2006-6893 · Microsoft · Teredo

Publicado 2006-12-04 · Atualizado 2018-10-17 · CVE-2006-6264

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Teredo (affected versions not specified)

Description The issue allows remote attackers to send IPv4 traffic to intranet hosts, bypassing IPv4 ingress filtering, by creating trusted peer entries for arbitrary incoming source Teredo addresses. This could potentially affect intranet hosts that use non-RFC1918 addresses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-6264

Produtos afetados

Teredo

Referências · 4

• http://securityfocus.com/archive/1/452996/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6264 · Nota de Segurança
• http://securityfocus.com/archive/1/452989/100/0/threaded · Nota
• http://symantec.com/avcenter/reference/Teredo_Security.pdf · Nota