Unscored CVE-2008-2246 EUVD-2008-2243GHSA-gr59-3xq7-cc69

Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a …

Published Aug 13, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.

References

oval:org.mitre.oval:def:6060 vdb-entry signature
TA08-225A third-party-advisory
HPSBST02360 vendor-advisory
31411 third-party-advisory
MS08-047 vendor-advisory
ADV-2008-2351 vdb-entry
1020678 vdb-entry
30634 vdb-entry