Symantec Blogs: Security ResponseSyndicate content

Who Left the Tunnel Door Open (in Windows Firewall for Vista)?
Jim Hoagland | July 9th, 2007
0 comments

Symantec Security Advisory SYMSA-2007-005[1]is now available. This covers a Teredo-related vulnerability in theVista version of Windows Firewall (BID 24779, CVE-2007-3038). (To beclear, this vulnerability is not connected to any of the nine Vistaissues I discussed in my last blog[2].)

Last fall, when Ollie Whitehouse[3] was analyzing whatTCP ports were open over a Teredo interface in a freshly installedWindows Vista RC2, he discovered that port 5357 was open over Teredo.We thought this odd since there is no functional reason this port,which corresponds to Web Services on Devices (WSD)[4], should beremotely accessible. When the release version of Vista becameavailable, we verified that this port was still open. (...

Read more
Tags: Security, Security Response, Vulnerabilities & Exploits, Endpoint Protection (AntiVirus)
Microsoft's Inaccurate Teredo Documentation, and Other Vista CVEs
Jim Hoagland | April 2nd, 2007
0 comments

Last week the CVE project issued nine new CVEs for Vista, numberedCVE-2007-1527 through CVE-2007-1535. While these CVEs were directlybased on our findings in Windows Vista Network Attack Surface Analysis[1] report (released as a Symantec Security Response whitepaper on March 7th), they had been requested by a third party. I'll describe each of these in this post.

We don't feel that most of the issues are especially significant.Microsoft reviewed the paper prior to its public release and Symantecwould participate in any warranted responsible disclosure forvulnerabilities.

We regard CVE-2007-1535 asimportant, and it could be regarded...

Read more
Tags: Security, Security Response, Vulnerabilities & Exploits, Endpoint Protection (AntiVirus)