PT-2006-6893 · Microsoft · Teredo

Published 2006-12-04 · Updated 2018-10-17 · CVE-2006-6264

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Teredo (affected versions not specified)

Description The issue allows remote attackers to send IPv4 traffic to intranet hosts, bypassing IPv4 ingress filtering, by creating trusted peer entries for arbitrary incoming source Teredo addresses. This could potentially affect intranet hosts that use non-RFC1918 addresses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6264

Affected Products

Teredo

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6264 · Security Note
• http://securityfocus.com/archive/1/452996/100/0/threaded · Note
• http://securityfocus.com/archive/1/452989/100/0/threaded · Note
• http://symantec.com/avcenter/reference/Teredo_Security.pdf · Note