|
|
>> Microsoft Windows IPsec Policy Data Disclosure Vulnerability (MS08-047)
|
Title : Microsoft Windows IPsec Policy Data Disclosure Vulnerability (MS08-047)
Advisory ID : VUPEN/ADV-2008-2351
CVE ID : CVE-2008-2246
CWE ID : CWE-310
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-08-12
|
|
A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to bypass security restrictions and gain knowledge of sensitive information. This issue is caused by an error when the default IPsec policy is imported from a Windows Server 2003 domain to a Windows Server 2008 domain, which could cause all IPsec rules to be ignored and network traffic to be transmitted in clear text, allowing an attacker intercepting the traffic on the network to view and possibly modify the contents of the traffic.
Credits
Vulnerability reported by the vendor.
ChangeLog
2008-08-12 : Initial release
Vulnerability Management
Subscribe to VUPEN Security VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@vupen.com. | |
|
