Microsoft pptp vpn vulnerabilities Exploits in Action

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
50
produce no results.
attempted to create new task manger window (had closed the previous one), 
now system completely unresponsive for about 30 seconds, then starts to 
(Slowly) show windows and desktop again).\
09:09:15
did ctrl-alt-del again to try to bring up option to shutdown, it came up in about 5 
seconds. clicked on shutdown, shutdown, it started to shutdown quickly at first, 
then no HD activity for awhile mouse still there but empty screen. mouse still 
moves.
another ctrl-alt-delete produced nothing.
09:10:50, logout in progress window appears, (please wail while the network 
connections are being closed).
09:11:52, that window disappears, mouse still there and moving.
09:10:00 client losses ping responses from both inside VPN and from external 
:AN (as do other “pingers”). as client finally ends VPN connection.
09:30:00 system still never shutdown completely, finally out of impatience for 
continued testing, I powered off the server in whatever state it was in.
After upgrade to Service pack 6a
No client connected:
start attack 04:37:30
CPU jumps to 50-50%
Memory starts climb 1 MB/sec.
04:39:35 CPU hits 100%, memory at 127mb (50%)
04:39:48, stop attack.
04:40:20, CPU drops to 0-1% memory still at 127mb.
04:40:52, CPU jumps back up to 100%.
tried refreshing event log, same error as scenario 1 earlier. RPC call can't be 
made.
tried running "dir" from command line, resources not available as before.
04:42:15 attempt to shutdown system using start>shutdown>shutdown.
get error saying I don't have permissions to shutdown.
04:42:02 CPU drops back down to 0-1% memory still the same, system still 
inoperable.
client can't finish negotiating to make connection.
04:43:50 try to shutdown again using start>shutdown>shutdown.
this time clears the windows, and starts the shutdown process, but then hangs 
inactively (though mouse still moves). looks like exact repeat of sp3 version of 
this test.
04:50:00 impatiently turned off computer since it wont finish shutting down.
Client attempt to connect during attack:
can't connect during attack.
0

---