{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-03-13T00:00:00", "descriptions": [{"lang": "en", "value": "Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "33667", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/33667"}, {"tags": ["x_refsource_MISC"], "url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf"}, {"name": "20070313 New report on Windows Vista network attack surface", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded"}, {"name": "20070403 Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html"}, {"name": "23267", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23267"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-1535", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "33667", "refsource": "OSVDB", "url": "http://osvdb.org/33667"}, {"name": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf", "refsource": "MISC", "url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf"}, {"name": "20070313 New report on Windows Vista network attack surface", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded"}, {"name": "20070403 Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded"}, {"name": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html", "refsource": "MISC", "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html"}, {"name": "23267", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23267"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:59:08.601Z"}, "title": "CVE Program Container", "references": [{"name": "33667", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/33667"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf"}, {"name": "20070313 New report on Windows Vista network attack surface", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded"}, {"name": "20070403 Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html"}, {"name": "23267", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23267"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-1535", "datePublished": "2007-03-20T20:00:00", "dateReserved": "2007-03-20T00:00:00", "dateUpdated": "2024-08-07T12:59:08.601Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*", "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Windows Vista establishes a Teredo address without user action upon connection to the Internet, contrary to documentation that Teredo is inactive without user action, which increases the attack surface and allows remote attackers to communicate via Teredo."}, {"lang": "es", "value": "Microsoft Windows Vista establece una direcci\u00f3n Teredo sin acci\u00f3n del usuario sobre una conexi\u00f3n a Internet, contrario a la documentaci\u00f3n que dice que Teredo est\u00e1 inactivo sin la acci\u00f3n del usuario, lo cual incrementa la superficie de ataque y permite a atacantes remotos comunicarse mediante Teredo."}], "id": "CVE-2007-1535", "lastModified": "2024-11-21T00:28:33.377", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-03-20T20:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/33667"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23267"}, {"source": "cve@mitre.org", "url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf"}, {"source": "cve@mitre.org", "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/33667"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/462793/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/464617/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/23267"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.symantec.com/avcenter/reference/Vista_Network_Attack_Surface_RTM.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/04/microsofts_inaccurate_teredo_d.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}