CVE-2006-6264
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the...
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
Exploit likelihood
What each source reports
NVD Score used
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
- Record
CVE-2006-6264- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
- Record
CVE-2006-6264- Updated
- 2026-11-02
EUVDEUVD-2006-6247 No score
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
- Record
EUVD-2006-6247- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m2x3-pgjp-hpvv No score
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the...
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
- Record
GHSA-m2x3-pgjp-hpvv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6264 is a high vulnerability (CVSS 7.5) in Microsoft Teredo, published December 4, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.7%, the 96th percentile. No source names a fixed version.