PT-2008-3741 · Microsoft · Windows Vista+3

Published 2008-08-12 · Updated 2018-10-30 · CVE-2008-2246

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista through SP1 and Server 2008

Description: The issue arises from the improper import of the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain. This prevents IPsec rules from being enforced, allowing remote attackers to bypass intended access restrictions. As a result, systems may ignore IPsec policies and transmit network traffic in clear text, potentially disclosing information intended to be encrypted. An attacker intercepting the traffic could view and possibly modify the contents, although this would not directly allow code execution or user rights elevation. It could, however, be used to collect useful information for further system compromise.

Recommendations: For Microsoft Windows Vista through SP1 and Server 2008, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-2246

Affected Products

Windows

Windows Server 2003

Windows Server 2008

Windows Vista

References · 11

• http://secunia.com/advisories/31411 · Vendor Advisory
• http://securityfocus.com/bid/30634 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-047 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2246 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2246 · Security Note
• http://securitytracker.com/id?1020678 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6060 · Note
• http://vupen.com/english/advisories/2008/2351 · Note
• http://us-cert.gov/cas/techalerts/TA08-225A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-047 · Note