GCVE - cpe:2.3:a:microsoft:teredo:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:teredo:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Teredo (`186db7f3-8810-5b01-b152-311595867da0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6266`	vulnerable	2026-06-08 04:49:22.403972	Details available Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets from non-Teredo source addresses, which might allow remote attackers to induce Teredo clients to send packets to third parties. Published: 2006-12-04T11:00:00.000Z Updated: 2024-08-07T20:19:35.108Z Open on db.gcve.eu Reference links http://www.symantec.com/avcenter/reference/Teredo_Security.pdf http://www.securityfocus.com/archive/1/452996/100/0/threaded http://www.securityfocus.com/archive/1/452989/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6265`	vulnerable	2026-06-08 04:49:22.403672	Details available Teredo clients, when located behind a restricted NAT, allow remote attackers to establish an inbound connection without the guessing required to find a port mapping for a traditional restricted NAT client, by (1) using the client port number contained in the Teredo address or (2) following the bubble-to-open procedure. Published: 2006-12-04T11:00:00.000Z Updated: 2024-08-07T20:19:35.246Z Open on db.gcve.eu Reference links http://www.symantec.com/avcenter/reference/Teredo_Security.pdf http://www.securityfocus.com/archive/1/452996/100/0/threaded http://www.securityfocus.com/archive/1/452989/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/17897	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6264`	vulnerable	2026-06-08 04:49:22.403338	Details available Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering. Published: 2006-12-04T11:00:00.000Z Updated: 2024-08-07T20:19:35.225Z Open on db.gcve.eu Reference links http://www.symantec.com/avcenter/reference/Teredo_Security.pdf http://www.securityfocus.com/archive/1/452996/100/0/threaded http://www.securityfocus.com/archive/1/452989/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6263`	vulnerable	2026-06-08 04:49:22.402937	Details available Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets. Published: 2006-12-04T11:00:00.000Z Updated: 2024-08-07T20:19:35.097Z Open on db.gcve.eu Reference links http://www.symantec.com/avcenter/reference/Teredo_Security.pdf http://www.securityfocus.com/archive/1/452996/100/0/threaded http://www.securityfocus.com/archive/1/452989/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.