Home    |    View Topics    |    Search    |    Contact Us    |   



Category:   Application (Security)  >   IPSec Vendors:   Microsoft
Microsoft Windows IPSec Policy May Not Be Enforced in Certain Cases
SecurityTracker Alert ID:  1020678
SecurityTracker URL:
CVE Reference:   CVE-2008-2246   (Links to External Site)
Date:  Aug 12 2008
Impact:   Disclosure of system information, Disclosure of user information
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): Vista, Vista SP1, 2008
Description:   A vulnerability was reported in IPSec in Microsoft Windows Vista and 2008. IPSec policy may not be properly enforced.

The system does not properly import IPsec policies into Windows Server 2008 domains from Windows Server 2003 domains. As a result, systems may ignore IPSec policies and transmit network traffic in clear text.

Impact:   The system may not properly enforce IPSec policy, transmitting data in the clear instead of encrypting the data.
Solution:   The vendor has issued the following fixes:

Windows Vista and Windows Vista Service Pack 1:

Windows Vista x64 Edition and Windows Vista x64 Edition Service Pack 1:

Windows Server 2008 for 32-bit Systems:

Windows Server 2008 for x64-based Systems:

Windows Server 2008 for Itanium-based Systems:

A restart is required.

The Microsoft advisory is available at:

Vendor URL: (Links to External Site)
Cause:   Access control error
Underlying OS:  Windows (2008), Windows (Vista)

Message History:   None.

 Source Message Contents

[Original Message Not Available for Viewing]

Go to the Top of This SecurityTracker Archive Page

Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, LLC