Test Kennung:	1.3.6.1.4.1.25623.1.0.801717
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability
Zusammenfassung:	This host is missing a critical security update according to; Microsoft Bulletin MS07-038.
Beschreibung:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS07-038. Vulnerability Insight: The flaw is due to an error in the handling of the Teredo transport mechanism resulting in network traffic being handled incorrectly though the Teredo interface. This may result in certain firewall rules being bypassed. Vulnerability Impact: Successful exploitation allows remote attacker to bypass firewall settings and possibly obtain sensitive information about the system. Affected Software/OS: Microsoft Windows Vista. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3038 BugTraq ID: 24779 http://www.securityfocus.com/bid/24779 Bugtraq: 20070709 SYMSA-2007-005: Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface (Google Search) http://www.securityfocus.com/archive/1/473294/100/0/threaded Cert/CC Advisory: TA07-191A http://www.us-cert.gov/cas/techalerts/TA07-191A.html CERT/CC vulnerability note: VU#101321 http://www.kb.cert.org/vuls/id/101321 HPdes Security Advisory: SSRT071446 http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html Microsoft Security Bulletin: MS07-038 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-038 http://osvdb.org/35952 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1884 http://www.securitytracker.com/id?1018354 http://secunia.com/advisories/26001 http://www.vupen.com/english/advisories/2007/2480 XForce ISS Database: win-vista-firewall-information-disclosure(35322) https://exchange.xforce.ibmcloud.com/vulnerabilities/35322
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.