Microsoft pptp vpn vulnerabilities Exploits in Action

CIPE (Cryptographic IP Encapsulation)
Creator’s protocol description at 
http://sites.inka.de/~bigred/devel/CIPE-
Protocol.txt
. A (very) brief summary follows:
CIPE is an 
“…ultra lightweight” IP encryption protocol to provide protected 
chanels of communication that are safe from eavesdropping & prevent 
man/monkey in the middle attacks
.”
Not designed to be interoperable with any other protocols or standards 
such as IPsec.
Designed for two fixed peers (not dynamic mobile users for example).
SSH (Secure Shell) Remote Login Protocol
SSH Internet Draft by Network Working Group 
http://www.cise.ufl.edu/help/ssh/RFC
A protocol that provides a secure means of logging into, executing 
commands, and transferring files to and from a remote host.
Key features include:
Multiple authentication options (RSA and others)
•
Broad range of choices for encryption and keys technologies
•
All communication encrypted
•
X11 forwarding connections securely
•
Flexible TCP/IP ports redirection in both directions
•
Client/server based, connections initiated by client to listening server
•
Basically SSH is meant to be a secure replacement for the very insecure 
clear text tools like Telnet and FTP. It is excellent for remote administration. It is 
also able to perform port redirection and tunneling so that ANY service or 
protocol can be inside the SSH encrypted connection, providing security to 
0

---