A security issue has been reported in Windows Vista, which can be exploited by malicious people to bypass certain security restrictions.

The problem is caused due to an error in the handling of the Teredo transport mechanism resulting in network traffic being handled incorrectly though the Teredo interface. This may result in certain firewall rules being bypassed.

Successful exploitation may disclose certain information about a system and its existence, but requires that the system's network profile is not set to "Public" and that a user e.g. is tricked into clicking a specially crafted link.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Jim Hoagland and Ollie Whitehouse, Symantec.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-038 (KB935807):
http://www.microsoft.com/technet/security/Bulletin/MS07-038.mspx

Symantec:
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-005.txt

Other references
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers