Microsoft pptp vpn vulnerabilities Exploits in Action

Part I - General Overview
1.0 Overview
1.1 Conventions used in this document
1.2 The basics of Virtual Private Networks
1.3 Various VPN technologies
1.4 Various topology scenarios
1.5 Targeted Service: Microsoft’s PPTP VPN Services
1.6 Overview of the PPTP Protocol 
1.7 MS PPTP Vulnerabilities Overview
1.8 Incidents Chart
1.9 CVE Numbers
Part II - Specific MS PPTP Exploits
2.0 Overview
2.1 Lab Setup
2.1.0 Overview
2.1.1 Time Period
2.1.2 Systems Used
2.1.3 Network Description and Diagram
2.1.4 Firewalls and filters
2.1.5 Monitoring and IDS
2.2 Tools used
2.3 Exploit #1 Netcat DoS Attack
2.3.1 Diagram
2.3.2 Screen shots
2.3.3 Packet Captures
2.3.4 Signature details
2.3.5 Defensive Measures
2.4 Exploit #2 Ipsend DoS Attack
2.5 Exploit #3 Apsend Dos Attack
2.6 Exploit #4 Anger.c Authentication Compromise MSCHAP v1
2.7 Exploit #5 Anger.c Authentication Compromise MSCHAP v2
0

---

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
2