PT-2011-1624 · Microsoft · Windows Server 2008+4

Vanhauser · Published 2011-01-07 · Updated 2020-02-20 · CVE-2010-4669

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows XP Windows Server 2003 Windows Vista Windows Server 2008 Windows 7

Description The issue concerns the Neighbor Discovery protocol implementation in the IPv6 stack, allowing remote attackers to cause a denial of service by sending many Router Advertisement messages with different source addresses. This can lead to CPU consumption and system hang.

Recommendations For Windows XP, consider disabling IPv6 to mitigate the risk of exploitation. For Windows Server 2003, restrict access to the network to minimize the risk of receiving malicious Router Advertisement messages. For Windows Vista, apply configuration changes to limit the impact of CPU consumption. For Windows Server 2008, avoid using the IPv6 stack until the issue is resolved. For Windows 7, consider temporarily disabling the IPv6 protocol to prevent system hang.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-4669

Affected Products

Windows 7

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 8

• 🔥 http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 · Exploit
• 🔥 http://youtube.com/watch?v=00yjWB6gGy8 · Exploit
• 🔥 http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4669 · Security Note
• https://t.me/cibsecurity/9975 · Telegram Post
• http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64583 · Note
• http://securityfocus.com/bid/45760 · Note