PT-2010-2540 · Microsoft · Windows
CVE-2010-0812
·
Publicado
2010-04-14
·
Atualizado
2023-12-07
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Description
A spoofing issue exists due to the way Windows checks the inner packet's IPv6 source address in a tunneled ISATAP packet. This could allow an attacker to impersonate an address and bypass edge or host firewalls. Additionally, information could be disclosed when the targeted computer replies to the message using the source IPv6 address that the attacker specified.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows