CVE-2008-2246: Infoleak
Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2246?
CVE-2008-2246 is classified as a medium severity vulnerability.
How can I mitigate CVE-2008-2246?
To mitigate CVE-2008-2246, ensure that your IPsec policies are properly configured and updated according to the latest security practices.
What versions of Windows are affected by CVE-2008-2246?
CVE-2008-2246 affects Microsoft Windows Vista through SP1 and Windows Server 2008.
What is the impact of CVE-2008-2246?
The impact of CVE-2008-2246 is that it allows remote attackers to bypass intended access restrictions due to improper IPsec policy import.
Is there a patch available for CVE-2008-2246?
There is no specific patch for CVE-2008-2246, but applying the latest service packs and security updates can help protect your system.