PT-2002-2192 · Microsoft · Windows 2000+2

Publicado 2002-10-28 · Atualizado 2019-04-30 · CVE-2002-1214

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft PPTP Service versions on Windows XP and Windows 2000

Description: The issue is related to a buffer overflow in the Microsoft PPTP Service, which can be triggered by a remote attacker sending a certain PPTP packet with malformed control data. This can cause a denial of service, resulting in the system hanging, and potentially allow the execution of arbitrary code.

Recommendations: For Windows XP and Windows 2000, apply the necessary patch or configuration changes as recommended by Microsoft to fix the buffer overflow issue in the PPTP Service.

Exploit

Correção

Identificadores relacionados

CVE-2002-1214

Produtos afetados

Pptp Service

Windows 2000

Windows Xp

Referências · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/pptp/ms02_063_pptp_dos.rb · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063 · Aviso do Fabricante
• http://iss.net/security_center/static/10199.php · Nota
• http://online.securityfocus.com/archive/1/293146 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1214 · Nota de Segurança
• http://securityfocus.com/bid/5807 · Nota