>> Microsoft Windows IPsec Policy Data Disclosure Vulnerability (MS08-047)
Title : Microsoft Windows IPsec Policy Data Disclosure Vulnerability (MS08-047) VUPEN ID : VUPEN/ADV-2008-2351 CVE ID : CVE-2008-2246 CWE ID : CWE-310
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-08-12
Technical Description
A vulnerability has been identified in Microsoft Windows, which could be exploited by remote attackers to bypass security restrictions and gain knowledge of sensitive information. This issue is caused by an error when the default IPsec policy is imported from a Windows Server 2003 domain to a Windows Server 2008 domain, which could cause all IPsec rules to be ignored and network traffic to be transmitted in clear text, allowing an attacker intercepting the traffic on the network to view and possibly modify the contents of the traffic.
