CVE-2006-6265

CVE-2006-6265 describes a Teredo-related risk where clients behind a restricted NAT can be reached for inbound connections by either using the client port embedded in the Teredo address or via the bubble-to-open procedure. The vulnerability stems from Teredo’s handling of port discovery in constr...

CVE-2006-6265: Undefined Security Weakness

Teredo clients, when located behind a restricted NAT, allow remote attackers to establish an inbound connection without the guessing required to find a port mapping for a traditional restricted NAT client, by 1 using the client port number contained in the Teredo address or 2 following the...