Microsoft Security Bulletin MS10-029 - Moderate Vulnerability in Windows ISATAP Component Could Allow Spoofing (978338)

Microsoft Security Bulletin MS10-029 - Moderate Vulnerability in Windows ISATAP Component Could Allow Spoofing 978338 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves one privately reported vulnerability in Microsoft Windows. This security...

Microsoft Windows ISATAP IPv6 address spoofing

Insufficient check for tunneling address...

Spoofing

Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address restrictions via a mismatched IPv6 source address in a tunneled ISATAP packet, aka "ISATAP IPv6 Source Address Spoofing...

CVE-2010-0812

ISATAP IPv6 Source Address Spoofing vulnerability (CVE-2010-0812) affects Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 SP2. The flaw in the Windows TCP/IP stack checks the inner IPv6 source in tunneled ISATAP packets, enabling spoofing that could bypass IPv4 source-address ...

PT-2010-2540 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing issue exists due to the way Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. This could allow an attacker to impersonate an addres...

Microsoft Windows ISATAP组件IPv6地址欺骗漏洞（MS10-029）

BUGTRAQ ID: 39352 CVE ID: CVE-2010-0812 Microsoft Windows是微软发布的非常流行的操作系统。 由于Windows检查隧道传输的ISATAP报文中内部报文IPv6源址的方法，导致Windows IPv6栈存在欺骗漏洞。成功利用这个漏洞的攻击者可以扮演地址绕过边界或主机防火墙。此外，当目标计算机使用攻击者所指定的源IPv6地址回复消息的话，还可能泄露信息。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft...

Microsoft 'ISATAP' Component Spoofing Vulnerability (978338)

This host is missing a critical security update according to Microsoft Bulletin MS10-029. OpenVAS Vulnerability Test $Id: secpodms10-029.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft 'ISATAP' Component Spoofing Vulnerability 978338 Authors: Antu Sanadi Updated By: Madhuri D on 2010-11-17 - T...

Microsoft 'ISATAP' Component Spoofing Vulnerability (978338)

This host is missing a critical security update according to Microsoft Bulletin MS10-029. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows ISATAP Component IPv6 Address Spoofing Vulnerability

Description Microsoft Windows is prone to a spoofing vulnerability that affects the ISATAP component. An attacker can exploit this issue to spoof IPv6 addresses. This may allow the attacker to bypass filtering devices that rely on the source IPv6 addresses; information disclosure and other attack...

MS10-029: Vulnerability in Windows ISATAP Component Could Allow Spoofing (978338)

A spoofing vulnerability exists in the Microsoft Windows IPv6 stack due to the way Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. A remote attacker could exploit this by spoofing a trusted IP address, which could be used to bypass security restrictions based on...

CVE-2009-0094

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

Design/Logic Flaw

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

CVE-2009-0094

The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the 1 "wpad" and 2 "isatap" NetBIOS names, which allows remote authenticated users to hijack the Web Proxy Auto-Discovery WPAD and Intra-Site Automatic Tunnel Addressing Protocol ISATAP...

CVE-2009-0094

This CVE describes WPAD/ISATAP spoofing via WINS/DNS server vulnerabilities in Windows 2000 SP4 and Windows Server 2003 SP1/SP2. The root cause is lack of restrictions on registering WPAD/ISATAP names in WINS (and WPAD in DNS in related entries), enabling remote authenticated actors to hijack WPA...

Microsoft Windows WINS Server WPAD and ISATAP Access Validation Vulnerability

Description The Microsoft Windows WINS Server is prone to an access-validation vulnerability because the software fails to properly restrict access when defining WPAD Web Proxy Autodiscovery Protocol and ISATAP Intra-Site Automatic Tunnel Addressing Protocol entries. An authenticated attacker may...

Microsoft Windows DNS and WINS special records spoofing

It's possible to spoof WPAD and ISATAP records...

Microsoft Windows媒体组件ISATAP URL处理信息泄露漏洞（MS08-076）

BUGTRAQ ID: 32654 CVECAN ID: CVE-2008-3010 Windows媒体组件包括Windows Media Player、Windows Media Format Runtime和Windows Media Services等多种服务和应用。...

Code injection

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through...

CVE-2008-3010

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through...

CVE-2008-3010

CVE-2008-3010 relates to ISATAP handling in Windows Media components (Windows Media Player 6.4, Windows Media Format Runtime 7.1–11, Windows Media Services 4.1 and 9) where ISATAP addresses are misclassified in the Local Intranet zone, risking NTLM credential leakage and potential remote code exe...