CVE-2006-6265

{"id": "CVE-2006-6265", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.8, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-12-04T11:28:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/452989/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/452996/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.symantec.com/avcenter/reference/Teredo_Security.pdf", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17897", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/452989/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/452996/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.symantec.com/avcenter/reference/Teredo_Security.pdf", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17897", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Teredo clients, when located behind a restricted NAT, allow remote attackers to establish an inbound connection without the guessing required to find a port mapping for a traditional restricted NAT client, by (1) using the client port number contained in the Teredo address or (2) following the bubble-to-open procedure."}, {"lang": "es", "value": "Los clientes Teredo, cuando est\u00e1n situados detr\u00e1s de un NAT restringido, permiten a atacantes remotos establecer una conexi\u00f3n entrante sin la conjetura necesaria para encontrar un mapeo de puertos de un cliente de NAT restringido tradicional, (1) usando el n\u00famero de puerto cliente contenido en la direcci\u00f3n Teredo o (2) siguiendo el procedimiento \"burbuja-para-abrir\" (bubble-to-open)."}], "lastModified": "2024-11-21T00:22:17.953", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:teredo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8944C7E5-8579-4905-8256-613D1E242B7B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}