CVE-2006-6264

Published Dec 4, 2006

Last updated 6 years ago

Overview

Description: Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:teredo:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8944C7E5-8579-4905-8256-613D1E242B7B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References