102 matches found
SYMSA-2007-005: Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-005 Advisory Title: Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface Author: Jim Hoagland / Ollie Whitehouse Release Dat...
Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
Hello all, In my blog today 1 I give a brief run-down of nine CVE entries that were recently published for Vista; the CVEs are numbered CVE-2007-1527 through CVE-2007-1535. At this point, I do not know who requested the entries be created. However, the entries are based on items reported in...
Design/Logic Flaw
The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks...
Code injection
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo...
CVE-2007-1533
The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks...
CVE-2007-1535
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo...
CVE-2007-1533
The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks...
CVE-2007-1535
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo...
CVE-2007-1533
CVE-2007-1533 affects the Teredo implementation in Microsoft Windows Vista. The issue: the Teredo nonce is reused across different UDP ports within a solicitation session, enabling remote attackers to brute-force and spoof the nonce. Documents describe a network-exposed impact (remote spoofing po...
CVE-2007-1535
CVE-2007-1535 (Microsoft Windows Vista) concerns the Teredo IPv6 transition technology. The provided documents show that Windows Vista establishes a Teredo address without explicit user action when the system connects to the Internet, contrary to published guidance that Teredo is inactive without...
CVE-2007-1533: Undefined Security Weakness
The Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with different UDP ports within a solicitation session, which makes it easier for remote attackers to spoof the nonce through brute force attacks...
CVE-2007-1535: Undefined Security Weakness
Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo...
CVE-2006-6858
Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an arbitrary Teredo client...
CVE-2006-6858
Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an arbitrary Teredo client...
CVE-2006-6858: Undefined Security Weakness
Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an arbitrary Teredo client...
Teredo Server Detection
The remote host is running a Teredo server. Teredo is a protocol for tunneling IPv6 over UDP, and is used to give nodes the ability to obtain IPv6 connectivity behind IPv4 network address translation NAT devices. A Teredo server is a node that is connected to both IPv4 and IPv6 networks. C Tenabl...
Security Advisory 0604
Security Advisory 0604 Summary : Input Validation error in Teredo tunnel Date : 31 December 2006 Affected versions : Miredo 1.0.5 down to 0.9.8 ID : MTFL-SA-0604 Details Authentication of a Teredo bubble as part of UDP hope punching with HMAC-MD5-64 hashing is done improperly and can easily be...
Teredo Server Detection
Binary data 3876.prm...
