PoPToP pptpd DoS
Published:		11.05.2007
Source:		BUGTRAQ
SecurityVulns ID:		7693
Type:		remote
Level:		5/10
Description:		Invalid PPTP packet causes connection tear-down.

Affected:		POPTOP : pptpd 1.3
CVE:		CVE-2007-0244 (pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued.)

Original document

DEBIAN, [SECURITY] [DSA 1288-1] New pptpd packages fix denial of service (11.05.2007)

Discuss:

Read or add your comments to this news (0 comments)