Lucene search
HistoryDec 04, 2006 - 11:28 a.m.
CVE-2006-6264
teredo
trusted peer
remote attackers
ingress filtering
cve-2006-6264
nvd
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.039 Low
EPSS
Percentile
92.0%
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
Affected configurations
Node
microsoftteredo
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:teredo | microsoft teredo | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.039 Low
EPSS
Percentile
92.0%
Related for CVE-2006-6264