PT-2002-2192 · Microsoft · Windows 2000+2

Published 2002-10-28 · Updated 2019-04-30 · CVE-2002-1214

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft PPTP Service versions on Windows XP and Windows 2000

Description: The issue is related to a buffer overflow in the Microsoft PPTP Service, which can be triggered by a remote attacker sending a certain PPTP packet with malformed control data. This can cause a denial of service, resulting in the system hanging, and potentially allow the execution of arbitrary code.

Recommendations: For Windows XP and Windows 2000, apply the necessary patch or configuration changes as recommended by Microsoft to fix the buffer overflow issue in the PPTP Service.

Exploit

Fix

Related Identifiers

CVE-2002-1214

Affected Products

Pptp Service

Windows 2000

Windows Xp

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/pptp/ms02_063_pptp_dos.rb · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063 · Vendor Advisory
• http://online.securityfocus.com/archive/1/293146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1214 · Security Note
• http://iss.net/security_center/static/10199.php · Note
• http://securityfocus.com/bid/5807 · Note