Detections
Analytics
Cisco IOS PPTP Vulnerability - Cisco Systems
medium Nessus Plugin ID 48958
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
Point-to-Point Tunneling Protocol (PPTP) allows users to tunnel to an Internet Protocol (IP) network using a Point-to-Point Protocol (PPP).The protocol is described in RFC2637.
PPTP implementation using Cisco IOS software releases contains a vulnerability that will crash a router if it receives a malformed or crafted PPTP packet. To expose this vulnerability, PPTP must be enabled on the router. PPTP is disabled by default. No additional special conditions are required.
This vulnerability is present in all Cisco IOS releases that support PPTP. PPTP is supported in the following software releases:
No other Cisco product is vulnerable.
There is no workaround for this vulnerability.
Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20010712-pptp.See Also
Plugin Details
Severity: Medium
ID: 48958
File Name: cisco-sa-20010712-pptphttp.nasl
Version: 1.17
Type: local
Family: CISCO
Published: 9/1/2010
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/o:cisco:ios
Required KB Items: Host/Cisco/IOS/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 7/12/2001
Vulnerability Publication Date: 7/12/2001
Reference Information
CVE: CVE-2001-1183
BID: 3022