CVE-2006-6858: Miredo

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an arbitrary Teredo client.

Affected products

• Miredo Miredo: up to and including 1.0.5; version 0.9.8 only; version 1.0.3 only; version 1.0.4 only

Published 2006-12-31. Last modified 2026-06-16.