IPv6 is a protocol designed to replace IPv4. IPv6 allows for the encapsulation of IPv4 addresses, in order to facilitate transition between the two standards, and allow the usage of IPv4 legacy applications under IPv6 networking. Additionally, many systems are expected to support both IPv4 and IPv6 traffic, in order to allow a transition period between the two standards. Under some circumstances, IPv4 addresses may be extracted from IPv6 traffic and passed to applications. These applications will not be able to distinguish between legitimate IPv4 traffic and that embedded in IPv6 traffic. If trust decisions are made based on this information, an attacker may be able to bypass some security measures. The details and consequences of exploitation will be highly dependant on the specifics of deployed applications.
IPv6 is a protocol designed to replace IPv4. IPv6 allows for the encapsulation of IPv4 addresses, in order to facilitate transition between the two standards, and allow the usage of IPv4 legacy applications under IPv6 networking. Additionally, many systems are expected to support both IPv4 and IPv6 traffic, in order to allow a transition period between the two standards. Under some circumstances, IPv4 addresses may be extracted from IPv6 traffic and passed to applications. These applications will not be able to distinguish between legitimate IPv4 traffic and that embedded in IPv6 traffic. If trust decisions are made based on this information, an attacker may be able to bypass some security measures. The details and consequences of exploitation will be highly dependant on the specifics of deployed applications.