← Database

CVE-2008-2246

HIGH CVSS: 7.8 Published: 2008-08-13 Modified: 2026-06-16

Description

Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.

Affected Platforms

Microsoft Windows-NtMicrosoft Windows Vista

Weakness Type

CWE-200

References