Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability

Bugtraq ID:	23293
Class:	Design Error
CVE:	CVE-2007-1532
Remote:	Yes
Local:	No
Published:	Apr 03 2007 12:00AM
Updated:	Apr 29 2009 11:16PM
Credit:	Jim Hoagland is credited with the discovery of this vulnerability.
Vulnerable:	Microsoft Windows Vista December CTP Microsoft Windows Vista Ultimate Microsoft Windows Vista Home Premium Microsoft Windows Vista Home Basic Microsoft Windows Vista Enterprise Microsoft Windows Vista Business Microsoft Windows Vista beta 2 Microsoft Windows Vista Beta 1 Microsoft Windows Vista Beta Microsoft Windows Vista 0
Not Vulnerable:

Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability

Microsoft Windows Vista is prone to a discovery-spoofing vulnerability.

An attacker can exploit this issue to conduct redirect attacks on another host on the network. This may lead to further attacks.

Note that to exploit this issue, the attacker must have access to the local network segment of a target computer.

Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Vista Neighbor Discovery Spoofing Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Windows Vista Network Attack Surface Analysis (Symantec)