CVE-2006-6266

medium

Description

Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets from non-Teredo source addresses, which might allow remote attackers to induce Teredo clients to send packets to third parties.

References

http://www.symantec.com/avcenter/reference/Teredo_Security.pdf

http://www.securityfocus.com/archive/1/452996/100/0/threaded

http://www.securityfocus.com/archive/1/452989/100/0/threaded

Details

Source: Mitre, NVD

Published: 2006-12-04

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

EPSS

EPSS: 0.14478