CVE-2007-1535

{"id": "CVE-2007-1535", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-03-20T20:19:00.000", "references": [{"url": "http://osvdb.org/33667", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/23267", "source": "cve@mitre.org"}, {"url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf", "source": "cve@mitre.org"}, {"url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/33667", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/23267", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo."}, {"lang": "es", "value": "Microsoft Windows Vista establece una direcci\u00f3n Teredo sin acci\u00f3n del usuario sobre una conexi\u00f3n a Internet, contrario a la documentaci\u00f3n que dice que Teredo est\u00e1 inactivo sin la acci\u00f3n del usuario, lo cual incrementa la superficie de ataque y permite a atacantes remotos comunicarse mediante Teredo."}], "lastModified": "2024-11-21T00:28:33.377", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}