CVE-2006-6264 Security feature bypass in n/a
Remote attackers can bypass IPv4 ingress filtering to send traffic to intranet hosts via Teredo tunneling, affecting operating systems with Teredo enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-6264?
CVE-2006-6264 is a high-severity vulnerability in n/a, published on 4 Dec 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
Which versions are affected by CVE-2006-6264?
It affects 1 product.
Products include Microsoft Teredo.
How do I fix CVE-2006-6264?
No fix has been published for CVE-2006-6264 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-6264 being exploited?
There is no known exploitation of CVE-2006-6264 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m2x3-pgjp-hpvv.