28 August 2007 | 7,266 views

Vista Security Feature – Teredo Protocol Analysis

Prevent Network Security Leaks with Acunetix

Teredo is a platform-independent protocol developed by Microsoft, which is enabled by default in Windows Vista. Teredo provides a way for nodes located behind an IPv4 NAT to connect to IPv6 nodes on the Internet. However, by tunneling IPv6 traffic over IPv4 UDP through the NAT and directly to the end node, Teredo raises some security concerns.

Primary concerns include bypassing security controls, reducing defense in depth, and allowing unsolicited traffic. Additional security concerns associated with the use of Teredo include the capability of remote nodes to open the NAT for themselves, benefits to worms, ways to deny Teredo service, and the difficulty in finding all Teredo traffic to inspect.

You can find the report here:

Teredo Security [PDF]

We have completed an analysis of the Teredo protocol based on a reading of the RFC (and apart from any implementation). In this section, we highlight some of the more significant security implications of the protocol; that is, ways in which Teredo positively or negatively impacts the IPv4 and IPv6 portions of the Internet.

Source: Securiteam



Recent in General Hacking:
- Dradis v2.9 – Information Sharing For Security Assessments
- MagicTree v1.3 Available For Download – Pentesting Productivity
- Kvasir – Penetration Testing Data Management Tool

Related Posts:
- NetworkMiner – Passive Sniffer & Packet Analysis Tool for Windows
- Vista more insecure than XP
- Bro – Passive Open-Source Network Traffic Analyzer

Most Read in General Hacking:
- 10 Best Security Live CD Distros (Pen-Test, Forensics & Recovery) - 1,133,469 views
- Hack Tools/Exploits - 576,845 views
- Password Cracking with Rainbowcrack and Rainbow Tables - 411,707 views

Low-cost VPS Hosting

6 Responses to “Vista Security Feature – Teredo Protocol Analysis”

  1. TheRealDonQuixote 31 August 2007 at 12:05 am Permalink

    You could almost sum up the whole article with this one line
    –”Teredo is a platform-independent protocol developed by Microsoft…”

    Right there bells start ringing in my head.

    Then I see this article, Microsoft UK Defaced by Saudi Hackers, and never want to touch a MS product again.

  2. Sandeep Nain 31 August 2007 at 1:39 am Permalink

    HA HA HA HA…
    I like your comment TRDQ..

    Name one thing developed by Microsft which hasn’t got any design flaws..

    and this time they are trying their hands on Platform independent thing..

    ummmm thumbs down for micro$oft

  3. Ne0 19 September 2008 at 10:30 am Permalink

    the pdf link is broken….. any other plz , hope its good

  4. Darknet 19 September 2008 at 10:49 am Permalink

    PDF still works for me, just tested it.

  5. Goodpeople 22 September 2008 at 7:00 am Permalink

    why am I not surprised..