Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability

Bugtraq ID:	24779
Class:	Design Error
CVE:	CVE-2007-3038
Remote:	Yes
Local:	No
Published:	Jul 10 2007 12:00AM
Updated:	Jul 13 2007 03:57PM
Credit:	Jim Hoagland and Ollie Whitehouse of Symantec are credited with the discovery of this vulnerability.
Vulnerable:	Microsoft Windows Vista x64 Edition 0 Microsoft Windows Vista Ultimate Microsoft Windows Vista Home Premium Microsoft Windows Vista Home Basic Microsoft Windows Vista Enterprise Microsoft Windows Vista Business Microsoft Windows Vista beta 2 Microsoft Windows Vista Beta 1 Microsoft Windows Vista Beta Microsoft Windows Vista 0 Avaya CIE 1.0.2
Not Vulnerable:

Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability

Windows Firewall for Windows Vista is prone to a vulnerability that may permit a bypass of existing firewall rules.

An attacker may trigger this vulnerability by sending malicious network data through the Teredo network transport system to obtain sensitive information; other attacks are also possible.

Note that Windows Vista systems configured with a 'Public' network profile are not vulnerable to this issue.

Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability

An attacker can use readily available network tools to exploit this issue.

Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability

Solution:
The vendor has released advisory MS07-038 and fixes to address this issue; please see the references for details.

Microsoft advisory MS07-038 has been revised; please see the referenced bulletin for specific details.


Microsoft Windows Vista Ultimate

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Beta 1

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista x64 Edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0df5d190-3ad7 -42d5-8629-43c47ec450cb&displaylang=en

Microsoft Windows Vista 0

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Business

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Beta

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista beta 2

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Home Premium

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Windows Vista (KB935807)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=e9b64746-6afa -4a30-833d-e058e000c821&displaylang=en

Microsoft Windows Vista Teredo Interface Firewall Bypass Vulnerability

References:

• Microsoft Windows Homepage (Microsoft )
  
• SYMSA-2007-005: Vista Windows Firewall Incorrectly Applies Filtering to Teredo I ([email protected])
  
• ASA-2007-299 MS07-038 Vulnerability in Windows Vista Firewall Could Allow Inform (Avaya)
  
• MS07-038 - Vulnerability in Windows Vista Firewall Could Allow Information Discl (Microsoft)