Test ID:	1.3.6.1.4.1.25623.1.0.801717
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS07-038.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS07-038. Vulnerability Insight: The flaw is due to an error in the handling of the Teredo transport mechanism resulting in network traffic being handled incorrectly though the Teredo interface. This may result in certain firewall rules being bypassed. Vulnerability Impact: Successful exploitation allows remote attacker to bypass firewall settings and possibly obtain sensitive information about the system. Affected Software/OS: Microsoft Windows Vista. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3038 BugTraq ID: 24779 http://www.securityfocus.com/bid/24779 Bugtraq: 20070709 SYMSA-2007-005: Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface (Google Search) http://www.securityfocus.com/archive/1/473294/100/0/threaded Cert/CC Advisory: TA07-191A http://www.us-cert.gov/cas/techalerts/TA07-191A.html CERT/CC vulnerability note: VU#101321 http://www.kb.cert.org/vuls/id/101321 HPdes Security Advisory: SSRT071446 http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html Microsoft Security Bulletin: MS07-038 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-038 http://osvdb.org/35952 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1884 http://www.securitytracker.com/id?1018354 http://secunia.com/advisories/26001 http://www.vupen.com/english/advisories/2007/2480 XForce ISS Database: win-vista-firewall-information-disclosure(35322) https://exchange.xforce.ibmcloud.com/vulnerabilities/35322
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.