PT-2007-2919 · Microsoft · Windows Vista

Publicado 2007-03-20 · Atualizado 2018-10-16 · CVE-2007-1529

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista

Description The issue concerns a network-based race condition, known as the "Total Spoof" attack, where the LLTD Responder in Microsoft Windows Vista fails to send a response to a DISCOVERY packet if another host has sent a spoofed response first. This allows remote attackers to spoof arbitrary hosts.

Recommendations For Microsoft Windows Vista, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-1529

Produtos afetados

Windows Vista

Referências · 7

• http://symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf · Nota
• http://securityfocus.com/archive/1/462793/100/0/threaded · Nota
• http://osvdb.org/33661 · Nota
• http://securityfocus.com/archive/1/464617/100/0/threaded · Nota
• http://securityfocus.com/bid/23263 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1529 · Nota de Segurança
• http://symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html · Nota