Microsoft Internet Connection Firewall IPv6 Traffic Blocking Vulnerability

Bugtraq ID:	7666
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 22 2003 12:00AM
Updated:	May 22 2003 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition
Not Vulnerable:

Microsoft Internet Connection Firewall IPv6 Traffic Blocking Vulnerability

An issue has been reported for systems that have enabled ICF whereby certain traffic may bypass existing firewall filters. Specifically, it has been reported the ICF fails to block IPv6 traffic.

Microsoft Internet Connection Firewall IPv6 Traffic Blocking Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Internet Connection Firewall IPv6 Traffic Blocking Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Internet Connection Firewall IPv6 Traffic Blocking Vulnerability

References:

• Internet Connection Firewall and Basic Firewall Do Not Block Internet Protocol V (Microsoft)