Microsoft pptp vpn vulnerabilities Exploits in Action

1.8 Incidents Chart
The following chart from 
www.incidents.org
based on data from 
www.dshield.org
is month snapshot of reported scans/attacks against the PPTP 
Connection Control TCP port 1723. Though it does not appear that PPTP related 
services have been in the top 10 list, this only lists reports that were actually 
submitted/tracked/reported to/from their site, and is only a small fraction of the 
total real incidents occurring every day. Attempts were made to try to get a 
0

---

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
18
yearly report on this service, but apparently the process for creating such reports is 
backlogged about 45 days, and w
as not available in time to include in this revision 
of this document unfortunately. A snapshot of a months worth of reports for July 
and August is included below. 
1.9 CVE Numbers
CVE (Common Vulnerabilities and Exposures) is a means of 
assigning identification numbers and a database tracking common 
weaknesses. The website 
www.cve.mitre.org
keeps a comprehensive and 
constantly updated list.
The following CVE and CVE candidates were found related to the 
protocols covered in this document including PPTP, MS PPTP, GRE, CHAP, MS 
CHAP, MPPC, MPPE:
CVE-2001-0017 Memory leak in PPTP server in Windows NT 4.0 
•
0

---