PPTP

For those of you who have a desire to crash Microsoft's PPTP stack, I have a pptp .spk script linked off of http://www.immunitysec.com/spike.html. It would probably be good to run against other PPTP stacks as well. Likewise, SPIKE's msrpcfuzzer takes down free software dce-rpc stacks just as fast...

Microsoft PPTP Server and Client remote vulnerability

phion Security Advisory 26/09/2002 Microsoft PPTP Server and Client remote vulnerability Summary ----------------------------- The Microsoft PPTP Service shipping with Windows 2000 and XP contains a remotely exploitable pre-authentication bufferoverflow. Affected Systems...

CVE-2001-1183

PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service crash via a malformed packet...

CVE-2001-1183

Cisco IOS PPTP vulnerability (CVE-2001-1183) affects PPTP implementation in Cisco IOS 12.1 and 12.2. A crafted/malformed PPTP packet can crash the router when PPTP is enabled, causing a denial of service. The issue can be triggered by sending to the PPTP control port (port 1723/tcp). Exploitation...

CVE-2002-0602

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...

CVE-2002-0602

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...

Cisco IOS Malformed PPTP Packet Remote DoS (CSCdt46181)

Point-to-Point Tunneling Protocol PPTP allows users to tunnel to an Internet Protocol IP network using a Point-to-Point Protocol PPP. The protocol is described in RFC2637. PPTP implementation using Cisco IOS software releases contains a vulnerability that will crash a router if it receives a...

KPMG-2002017: Snapgear Lite+ Firewall Denial of Service

-------------------------------------------------------------------- Title: Snapgear Lite+ Firewall Denial of Service BUG-ID: 2002017 Released: 02nd May 2002 -------------------------------------------------------------------- Problem: ======== Several issues with the Snapgear Lite+ Firewall coul...

CVE-2001-0204

Technical details about CVE-2001-0204 are not publicly available in the provided documents. Monitor for updates.

Cisco IOS vulnerable to DoS via crafted PPTP packet sent to port 1723/tcp

Overview Cisco IOS contains a vulnerability that allows an intruder to crash the router. Description By sending a specially crafted PPTP packet to port 1723, an intruder can crash a device running a vulnerable version of IOS. Quoting from the Cisco Advisory: By sending a crafted PPTP packet to a...

DoS против PPTP в различных системах

Большое число пакетов определенного типа приводит к утечке памяти в ядре...

Cisco IOS PPTP Vulnerability

...

CVE-2001-0204

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets...

CVE-2001-0017

Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability...

CVE-2001-0017

The CVE-2001-0017 issue affects Windows NT 4.0 PPTP server, where a memory leak can be triggered by malformed PPTP data packets, leading to remote denial of service. The vulnerability is due to improper handling of PPTP packets in the Windows NT PPTP implementation, which can exhaust system resou...

DoS против BinTec X4000 (SYN scan)

SYN-Пакет в порт 1723 pptp вызывает отказ в обслуживании...

X4000 DoS: Details and workaround

System affected: --------------- BinTec X4000 Router All firmware versions as far as I know, only verified with latest release 5.1.6 Patch 10 Machines with activated additional VPN software license are NOT affected, neither are machines which filter 1723/tcp. Description: ----------- As mentioned...

CVE-2001-0017

Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability...

PPTP Detection

The remote host is running a PPTP Point-to-Point Tunneling Protocol server. It allows users to set up a tunnel between their host and the network the remote host is attached to. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10622; scriptversion "1.26";...

Denial of Service attack against computers running Microsoft PPTP (NT 4.0)

Diversified Software Industries, Inc. http://www.dsi-inc.net/dsi Security Advisory February 22, 2001 Denial of Service attack against computers running Microsoft PPTP NT 4.0 1. Description 2. Steps to reproduce exploits 3. Vendor status, solution, workarounds 4. Disclaimer 5. Credits 6. About DSI...