Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> Windows : Microsoft Bulletins >> Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Vulnerability Assessment Details

Unchecked Buffer in PPTP Implementation Could Enable DOS Attacks (Q329834)

Vulnerability Assessment Summary
Checks for MS Hotfix Q329834, Unchecked Buffer in PPTP DOS

Detailed Explanation for this Vulnerability Assessment

Summary :

It is possible to crash the remote system.

Description :

The remote version of Windows contains a flaw in his PPTP implementation.
If the remote host is configured to act as a PPTP server, a remote
attacker can send a specially crafted packet to corrupt the kernel
memory and crash the remote system.

Solution :

Microsoft has released a set of patches for Windows XP and 2000 :

http://www.microsoft.com/technet/security/bulletin/ms02-063.mspx

Network Security Threat Level:

Medium / CVSS Base Score : 5
(AV:R/AC:L/Au:NR/C:N/A:C/I:N/B:A)

Networks Security ID: 5807, 6067

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security

Cables, Connectors