Thursday, July 12, 2007

Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface

Via SecuriTeam Blog -

Windows Firewall for Windows Vista is "the Microsoft provided firewall solution. It is installed and enabled out-of-the-box, with most ports filtered".

Due to an implementation issue, the Windows Firewall does not apply firewall rules correctly on the Teredo Interface. This allows a level of remote access to TCP and UDP ports and services that exceeds what Microsoft expected and what an administrator would expect.

Credit:
The information has been provided by Jim Hoagland / Ollie Whitehouse.
The original article can be found at: http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-005.txt

Vendor Response:
This has been patched in MS07-038.

No comments:

Post a Comment