Lucene search

MitreCVE-2007-1533

HistoryMar 20, 2007 - 8:19 p.m.

CVE-2007-1533

2007-03-2020:19:00

mitre

web.nvd.nist.gov

teredo

microsoft

windows vista

cve-2007-1533

nonce

udp ports

remote attackers

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.896

Percentile

98.8%

JSON

The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks.

Affected configurations

Nvd

Node

microsoftwindows_vista

VendorProductVersionCPE
microsoftwindows_vista*cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_vista	*	cpe:2.3:o:microsoft:windows_vista::::::::

References

osvdb.org/33666

www.securityfocus.com/archive/1/462793/100/0/threaded

www.securityfocus.com/archive/1/464617/100/0/threaded

www.securityfocus.com/bid/23301

www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf

www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.896

Percentile

98.8%

JSON

Related for CVE-2007-1533