Microsoft Windows PPTP Server Malformed Control Packet Remote DoS (179107)

medium Nessus Plugin ID 10313

Synopsis

The remote PPTP server is vulnerable to denial of service.

Description

We could make the remote PPTP host crash by telnetting to port 1723, and sending garbage followed by the character ^D. (control-d).

An attacker may use this flaw to deny service.

Solution

Install WindowsNT SP5.

Plugin Details

Severity: Medium

ID: 10313

File Name: winnt_pptp_dos.nasl

Version: 1.27

Type: remote

Agent: windows

Family: Windows

Published: 8/30/1999

Updated: 8/7/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Exploit Available: true

Exploit Ease: Exploits are available

Reference Information

CVE: CVE-1999-0140

BID: 2111

Detections

Analytics