39 matches found
Debian Security Advisory DSA 1288-2 (pptpd)
The remote host is missing an update to pptpd announced via advisory DSA 1288-2. OpenVAS Vulnerability Test $Id: deb12882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1288-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 295-1 (pptpd)
The remote host is missing an update to pptpd announced via advisory DSA 295-1. OpenVAS Vulnerability Test $Id: deb2951.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 295-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1288-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1288-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 6.06 LTS / 6.10 / 7.04 : pptpd vulnerability (USN-459-1)
A flaw was discovered in the PPTP tunnel server. Remote attackers could send a specially crafted packet and disrupt established PPTP tunnels, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory...
openSUSE 10 Security Update : pptpd (pptpd-4252)
This update fixes a bug found by regression tests. The error appears in code processing out-of-order sequence numbers of some MPPE implementations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
openSUSE 10 Security Update : pptpd (pptpd-3284)
Specially crafted GRE packets can crash pptpd CVE-2007-0244. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pptpd-3284. The text description of this plugin is C SUSE LLC...
[SECURITY] [DSA 1288-2] New pptpd packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 1288-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 2nd, 2007 http://www.debian.org/security/faq -...
PPTPD: Denial of Service attack
Background PPTPD is a Point-to-Point Tunnelling Protocol Daemon for Linux. Description James Cameron from HP has reported a vulnerability in PPTPD caused by malformed GRE packets. Impact A remote attacker could exploit this vulnerability to cause a Denial of Service on the PPTPD connection...
GLSA-200705-18 : PPTPD: Denial of Service attack
The remote host is affected by the vulnerability described in GLSA-200705-18 PPTPD: Denial of Service attack James Cameron from HP has reported a vulnerability in PPTPD caused by malformed GRE packets. Impact : A remote attacker could exploit this vulnerability to cause a Denial of Service on the...
CVE-2007-0244
CVE-2007-0244 affects PoPToP PPTP Server (pptpd) prior to version 1.3.4. The vulnerability stems from how pptpd handles GRE traffic, specifically (1) out-of-order GRE sequence numbers and (2) a faulty pointer/dequeue path in processing certain GRE packets, which can cause a denial of service by t...
PoPToP pptpd DoS
Invalid PPTP packet causes connection tear-down...
[SECURITY] [DSA 1288-1] New pptpd packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1288-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2007 http://www.debian.org/security/faq -...
Debian DSA-1288-1 : pptpd - programming error
It was discovered that the PoPToP Point to Point Tunneling Server contains a programming error, which allows the tear-down of a PPTP connection through a malformed GRE packet, resulting in denial of service. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 1288-1] New pptpd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1288-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2007 http://www.debian.org/security/faq -...
Debian DSA-295-1 : pptpd - buffer overflow
Timo Sirainen discovered a vulnerability in pptpd, a Point to Point Tunneling Server, which implements PPTP-over-IPSEC and is commonly used to create Virtual Private Networks VPN. By specifying a small packet length an attacker is able to overflow a buffer and execute code under the user id that...
[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 295-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 295-1] New pptpd packages fix remote root exploit
-------------------------------------------------------------------------- Debian Security Advisory DSA 295-1 [email protected] http://www.debian.org/security/ Martin Schulze April 30th, 2003 http://www.debian.org/security/faq -...