PT-2007-7511 · Pptpd · Pptpd

Publicado 1970-01-01 · Atualizado 2011-03-08 · CVE-2007-0244

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions pptpd versions prior to 1.3.4

Description The issue allows remote attackers to cause a denial of service, specifically a PPTP connection tear-down, via certain GRE packets. This can be achieved by sending GRE packets with out-of-order sequence numbers or certain GRE packets that are processed using a wrong pointer and improperly dequeued. The vulnerability can be exploited remotely, potentially leading to a disruption in the availability of protected information.

Recommendations For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the PPTP connection to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-03568

BDU:2015-04060

BDU:2015-09570

CVE-2007-0244

DSA-1288-1

DSA-1288-2

Produtos afetados

Pptpd

Referências · 23

• http://ubuntu.com/usn/usn-459-2 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200705-18.xml · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=501476&group_id=44827 · Nota
• https://bdu.fstec.ru/vul/2015-04060 · Nota de Segurança
• http://debian.org/security/dsa-1288 · Nota
• http://novell.com/linux/security/advisories/2007_10_sr.html · Aviso do Fabricante
• http://securitytracker.com/id?1018064 · Nota
• http://ubuntu.com/usn/usn-459-1 · Aviso do Fabricante
• http://debian.org/security/2007/dsa-1288 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2007-0244 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1743 · Nota
• http://trustix.org/errata/2007/0017 · Aviso do Fabricante
• http://secunia.com/advisories/26987 · Nota
• http://novell.com/linux/security/advisories/2007_19_sr.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09570 · Nota de Segurança