671 matches found
Memory corruption
Memory leak in the virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service memory consumption via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566...
CVE-2008-1151
Memory leak in the virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service memory consumption via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566...
CVE-2008-1150
The virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service resource exhaustion via a series of PPTP sessions, related to the persistence of interface descriptor block IDB data structures after process termination, aka bug ID...
Design/Logic Flaw
The virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service resource exhaustion via a series of PPTP sessions, related to the persistence of interface descriptor block IDB data structures after process termination, aka bug ID...
CVE-2008-1151
Memory leak in the virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service memory consumption via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566...
CVE-2008-1151
CVE-2008-1151 describes a memory leak in the Cisco IOS VPDN PPTP handling prior to 12.3, where terminating PPTP sessions leaks memory and may exhaust interface descriptors (IDBs), causing DoS-like behavior. The issue is tied to bug CSCsj58566 and is observable when PPTP is used with VPDN on affec...
CVE-2008-1150
CVE-2008-1150 affects Cisco IOS prior to 12.3 and is caused by PPTP handling in VPDN: two vulnerabilities lead to denial of service through (1) a memory leak after PPTP session termination and (2) exhaustion of interface descriptor blocks (IDBs) because virtual access interfaces are not reused. T...
CVE-2008-1150: Undefined Security Weakness
The virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service resource exhaustion via a series of PPTP sessions, related to the persistence of interface descriptor block IDB data structures after process termination, aka bug ID...
CVE-2008-1151: Undefined Security Weakness
Memory leak in the virtual private dial-up network VPDN component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service memory consumption via a series of PPTP sessions, related to "dead memory" that remains allocated after process termination, aka bug ID CSCsj58566...
Ubuntu 6.06 LTS : pptpd vulnerabilities (USN-459-2)
USN-459-1 fixed vulnerabilities in pptpd. However, a portion of the fix caused a regression in session establishment under Dapper for certain PPTP clients. This update fixes the problem. We apologize for the inconvenience. A flaw was discovered in the PPTP tunnel server. Remote attackers could se...
USN-459-2: pptpd regression
USN-459-1 fixed vulnerabilities in pptpd. However, a portion of the fix caused a regression in session establishment under Dapper for certain PPTP clients. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A flaw was discovered in the PPTP tunnel server...
USN-459-1: pptpd vulnerability
A flaw was discovered in the PPTP tunnel server. Remote attackers could send a specially crafted packet and disrupt established PPTP tunnels, leading to a denial of service...
CVE-2007-0244
pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...
Code injection
pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...
CVE-2007-0244
pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...
CVE-2007-0244
pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...
CVE-2007-0244
pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...
CVE-2007-0244
pptpgre.c in PoPToP Point to Point Tunneling Server pptpd before 1.3.4 allows remote attackers to cause a denial of service PPTP connection tear-down via 1 GRE packets with out-of-order sequence numbers or 2 certain GRE packets that are processed using a wrong pointer and improperly dequeued...
