ID de Prueba:	1.3.6.1.4.1.25623.1.0.11540
Categoría:	Gain a shell remotely
Título:	PPTP Server Buffer Overflow Vulnerability
Resumen:	The remote PPTP server is prone to a remote buffer overflow; vulnerability.
Descripción:	Summary: The remote PPTP server is prone to a remote buffer overflow vulnerability. Vulnerability Insight: The problem occurs due to insufficient sanity checks when referencing user-supplied input used in various calculations. As a result, it may be possible for an attacker to trigger a condition where sensitive memory can be corrupted. Vulnerability Impact: Successful exploitation of this issue may allow an attacker to execute arbitrary code with the privileges of the affected server. Solution: The vendor has released updated releases of PPTP server which address this issue. Users are advised to upgrade as soon as possible. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0213 BugTraq ID: 7316 http://www.securityfocus.com/bid/7316 Bugtraq: 20030409 PoPToP PPTP server remotely exploitable buffer overflow (Google Search) http://www.securityfocus.com/archive/1/317995 Bugtraq: 20030418 Exploit for PoPToP PPTP server (Google Search) http://marc.info/?l=bugtraq&m=105068728421160&w=2 Bugtraq: 20030422 Re: Exploit for PoPToP PPTP server - Linux version (Google Search) http://www.securityfocus.com/archive/1/319428 Bugtraq: 20030428 GLSA: pptpd (200304-08) (Google Search) http://marc.info/?l=bugtraq&m=105154539727967&w=2 CERT/CC vulnerability note: VU#673993 http://www.kb.cert.org/vuls/id/673993 Debian Security Information: DSA-295 (Google Search) http://www.debian.org/security/2003/dsa-295 SuSE Security Announcement: SuSE-SA:2003:029 (Google Search) http://www.novell.com/linux/security/advisories/2003_029.html
Copyright	Copyright (C) 2003 Xue Yong Zhi

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.