Unscored CVE-2006-6266 EUVD-2006-6249GHSA-x63c-6qqq-h574

Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packet…

Published Dec 4, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets from non-Teredo source addresses, which might allow remote attackers to induce Teredo clients to send packets to third parties.

References

http://www.symantec.com/avcenter/reference/Teredo_Security.pdf
20061129 Re: [Full-disclosure] New report on Teredo security mailing-list
20061129 New report on Teredo security mailing-list