Oval Definition:	oval:org.mitre.oval:def:6060
Revision Date: 2014-03-17 Version: 46 Title: IPsec Policy Information Disclosure Vulnerability Description: Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-2246 Platform(s): Microsoft Windows Server 2008 Microsoft Windows Vista Product(s): Definition Synopsis Vulnerable Windows Vista (32-bit)/(x64) Windows Vista (32-bit)/(x64) Microsoft Windows Vista (32-bit) is installed OR Microsoft Windows Vista x64 Edition is installed AND Check for LDR/GDR the version of Ipsecsvc.dll is less than 6.0.6000.16705 OR Check for LDR Check if version of Ipsecsvc.dll is less than 6.0.6000.20861 AND Check if version of Ipsecsvc.dll is greater than or equal to 6.0.6000.20000 OR Vulnerable Windows Vista SP1 (32-bit)/(x64)/Server 2008 (x86)/(x64)/(ia-64) Windows Vista SP1 (32-bit)/(x64)/Server 2008 (x86)/(x64)/(ia-64) Microsoft Windows Vista (32-bit) Service Pack 1 is installed OR Microsoft Windows Server 2008 (32-bit) is installed OR Microsoft Windows Vista x64 Edition Service Pack 1 is installed OR Microsoft Windows Server 2008 (64-bit) is installed OR Microsoft Windows Server 2008 (ia-64) is installed AND Check for LDR/GDR the version of Ipsecsvc.dll is less than 6.0.6001.18094 OR Check for LDR Check if version of Ipsecsvc.dll is less than 6.0.6001.22206 AND Check if verson of Ipsecsvc.dll is greater than or equal to 6.0.6001.22000
BACK