Fedora Core 10 FEDORA-2009-3070 (pptp)

The remote host is missing an update to pptp announced via advisory FEDORA-2009-3070. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

[SECURITY] Fedora 10 Update: pptp-1.7.2-5.fc10

Client for the proprietary Microsoft Point-to-Point Tunneling Protocol, PPTP. Allows connection to a PPTP based VPN as used by employers and some cable and ADSL service providers...

Design/Logic Flaw

The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...

CVE-2009-0629

Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...

[SECURITY] Fedora 10 Update: NetworkManager-pptp-0.7.0.99-1.fc10

This package contains software for integrating PPTP VPN support with the NetworkManager and the GNOME desktop...

[SECURITY] Fedora 9 Update: NetworkManager-pptp-0.7.0.99-1.fc9

This package contains software for integrating PPTP VPN support with the NetworkManager and the GNOME desktop...

CVE-2008-4227

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

Code injection

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

CVE-2008-4227

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

CVE-2008-4227

Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 change the PPTP VPN encryption level to a lower one, making it easier for remote attackers to decrypt traffic or hijack connections. Affected software: Apple iPhone OS 1.0–2.1 and iPod touch OS 1.1–2.1. Root cause: reduction in PPTP enc...

PT-2008-5520 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue concerns a change in the encryption level of PPTP VPN connections, which is lowered to a level that makes it easier for...

pptp-version NSE Script

Attempts to extract system information from the point-to-point tunneling protocol PPTP service. Example Usage nmap -sV Script Output PORT STATE SERVICE VERSION 1723/tcp open pptp YAMAHA Corporation Firmware: 32838 Service Info: Host: RT57i Requires comm nmap shortport string local comm = require...

Watchguard Firebox user enumeration

Error code is different for invalid username and password for PPTP MS-CHAPv2 authentication...

[NEWS] Watchguard Firebox PPTP VPN User Enumeration Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Authentication flaw

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2008-1618

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2008-1618

CVE-2008-1618 : Watchguard Firebox PPTP VPN (pre-10) may leak valid usernames during MS-CHAPv2 authentication due to distinct error codes for valid vs invalid usernames. The documented behavior enables an attacker to enumerate valid usernames, facilitating targeted password guessing and potential...

Cisco IOS虚拟专用拨号网络多个拒绝服务漏洞

BUGTRAQ ID: 28460 CVECAN ID: CVE-2008-1151,CVE-2008-1150 Cisco IOS是思科网络设备所使用的互联网操作系统。 如果某些Cisco IOS 12.3之前版本中使用了点到点隧道协议（PPTP）的话，虚拟专用拨号网络（VPDN）中就可能存在两个安全漏洞，远程攻击者可能利用此漏洞获取设备敏感信息或导致设备不可用。...

Design/Logic Flaw

The virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service resource exhaustion via a series of PPTP sessions, related to the persistence of interface descriptor block IDB data structures after process termination, aka bug ID...

CVE-2008-1151

Memory leak in the virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service memory consumption via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566...