PT-2007-7511 · Pptpd · Pptpd

Published 1970-01-01 · Updated 2011-03-08 · CVE-2007-0244

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions pptpd versions prior to 1.3.4

Description The issue allows remote attackers to cause a denial of service, specifically a PPTP connection tear-down, via certain GRE packets. This can be achieved by sending GRE packets with out-of-order sequence numbers or certain GRE packets that are processed using a wrong pointer and improperly dequeued. The vulnerability can be exploited remotely, potentially leading to a disruption in the availability of protected information.

Recommendations For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the PPTP connection to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-03568

BDU:2015-04060

BDU:2015-09570

CVE-2007-0244

DSA-1288-1

DSA-1288-2

Affected Products

Pptpd

References · 23

• http://ubuntu.com/usn/usn-459-2 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200705-18.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04060 · Security Note
• http://novell.com/linux/security/advisories/2007_10_sr.html · Vendor Advisory
• http://ubuntu.com/usn/usn-459-1 · Vendor Advisory
• http://debian.org/security/2007/dsa-1288 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-0244 · Vendor Advisory
• http://trustix.org/errata/2007/0017 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_19_sr.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09570 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0244 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-0244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0244 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2007-0244 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03568 · Security Note