Microsoft pptp vpn vulnerabilities Exploits in Action

Exploit #5 Details
Name:
PPTP Attack #5 using Anger.c against MS-CHAP Version 1 & 2
Variants:
ntpptp.c, deceit.c, L0phtcrack with appropriate extensions
Operating Systems:
All PPTP clients and servers that use MS-CHAP 
version 2
Protocols/Services:
PPTP, MS-CHAPv2, LANMAN, NT Encryption
Brief Description:
Attacker is easily able to “sniff” much of the PPTP 
client and server handshake information as well as the actual LANMAN & NT 
hashes, the script then quickly parses out the relevant information and can 
separate the LANMAN and NT hashes and dump them into two separate files to 
make cracking with L0phtcrack and similar tools easier and much faster.