Microsoft pptp vpn vulnerabilities Exploits in Action

5.2 Microsoft Knowledge Base & Security Bulletins
Microsoft
Q172215, How to Force 128-bit Data Encryption for RAS
http://support.microsoft.com/default.aspx?scid=kb;en-us;q172215
July 31
st
, 1997
Microsoft
Q104292, How to Identify 128-bit Windows 95 Dial-Up Networking Client
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q104292
July 28
th
, 2001
Microsoft
Q236584, 128-Bit client Is Authenticated but Cannot Use Resources on the 
Network
http://support.microsoft.com/default.aspx?scid=kb;en-us;q236584
May 20, 2002
Microsoft
Microsoft Security Bulletin (MS98-12)
http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/security/bu
lletin/ms98-012.asp
August 18
th
, 1998
Microsoft
PPTP Performance & Security Upgrade for WinNT 4.0 Release Notes
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q189595
Note: Force the use of the updated MS-CHAP by adding the SecureVPN registry 
key and setting it to 1.
Note: Prevent legacy clients from sending the easily crack-able LANMan hash in 
the MS-CHAP challenge response by creating a Registry value called 
UseLmPassword and setting it to 0.
March 1
st
, 2002 
Microsoft
Malformed PPTP Packet Stream Vulnerability
0

---