Vista Security Feature – Teredo Protocol Analysis

Use Netsparker


Teredo is a platform-independent protocol developed by Microsoft, which is enabled by default in Windows Vista. Teredo provides a way for nodes located behind an IPv4 NAT to connect to IPv6 nodes on the Internet. However, by tunneling IPv6 traffic over IPv4 UDP through the NAT and directly to the end node, Teredo raises some security concerns.

Primary concerns include bypassing security controls, reducing defense in depth, and allowing unsolicited traffic. Additional security concerns associated with the use of Teredo include the capability of remote nodes to open the NAT for themselves, benefits to worms, ways to deny Teredo service, and the difficulty in finding all Teredo traffic to inspect.

You can find the report here:

Teredo Security [PDF]

We have completed an analysis of the Teredo protocol based on a reading of the RFC (and apart from any implementation). In this section, we highlight some of the more significant security implications of the protocol; that is, ways in which Teredo positively or negatively impacts the IPv4 and IPv6 portions of the Internet.

Source: Securiteam

Posted in: Hacking News, Windows Hacking

, , , ,


Latest Posts:


Acunetix Vulnerability Scanner For Linux Now Available Acunetix Vulnerability Scanner For Linux Now Available
Acunetix Vulnerability Scanner For Linux is now available, now you get all of the functionality of Acunetix, with all of the dependability of Linux.
Gerix WiFi Cracker - Wireless 802.11 Hacking Tool With GUI Gerix WiFi Cracker – Wireless 802.11 Hacking Tool With GUI
Gerix WiFi cracker is an easy to use Wireless 802.11 Hacking Tool with a GUI, it was originally made to run on BackTrack and this version has been updated for Kali (2018.1).
Malcom - Malware Communication Analyzer Malcom – Malware Communication Analyzer
Malcom is a Malware Communication Analyzer designed to analyze a system's network communication using graphical representations of network traffic.
WepAttack - WLAN 802.11 WEP Key Hacking Tool WepAttack – WLAN 802.11 WEP Key Hacking Tool
WepAttack is a WLAN open source Linux WEP key hacking tool for breaking 802.11 WEP keys using a wordlist based dictionary attack.
Eraser - Windows Secure Erase Hard Drive Wiper Eraser – Windows Secure Erase Hard Drive Wiper
Eraser is a hard drive wiper for Windows which allows you to run a secure erase and completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.
Insecure software versions are a problem Web Security Stats Show XSS & Outdated Software Are Major Problems
Netsparker just published some anonymized Web Security Stats about the security vulnerabilities their online solution identified on their users’ web applications and web services during the last 3 years.


5 Responses to Vista Security Feature – Teredo Protocol Analysis

  1. TheRealDonQuixote August 31, 2007 at 12:05 am #

    You could almost sum up the whole article with this one line
    –“Teredo is a platform-independent protocol developed by Microsoft…”

    Right there bells start ringing in my head.

    Then I see this article, Microsoft UK Defaced by Saudi Hackers, and never want to touch a MS product again.

  2. Sandeep Nain August 31, 2007 at 1:39 am #

    HA HA HA HA…
    I like your comment TRDQ..

    Name one thing developed by Microsft which hasn’t got any design flaws..

    and this time they are trying their hands on Platform independent thing..

    ummmm thumbs down for micro$oft

  3. Ne0 September 19, 2008 at 10:30 am #

    the pdf link is broken….. any other plz , hope its good

  4. Darknet September 19, 2008 at 10:49 am #

    PDF still works for me, just tested it.

  5. Goodpeople September 22, 2008 at 7:00 am #

    why am I not surprised..