Microsoft Windows NT PPTP DoS Vulnerability
BID:2368
Info
Microsoft Windows NT PPTP DoS Vulnerability
| Bugtraq ID: | 2368 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 13 2001 12:00AM |
| Updated: | Feb 13 2001 12:00AM |
| Credit: | Discovered by Kirk Corey of Diversified Software Industries and posted in a Microsoft Security Bulletin (MS01-009) on Feb 13, 2001. |
| Vulnerable: |
Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows NT Terminal Server 4.0 SP6 Microsoft Windows NT Terminal Server 4.0 SP5 Microsoft Windows NT Terminal Server 4.0 SP4 Microsoft Windows NT Terminal Server 4.0 SP3 Microsoft Windows NT Terminal Server 4.0 SP2 Microsoft Windows NT Terminal Server 4.0 SP1 Microsoft Windows NT Terminal Server 4.0 Microsoft Windows NT Server 4.0 SP6a Microsoft Windows NT Server 4.0 SP6 Microsoft Windows NT Server 4.0 SP5 Microsoft Windows NT Server 4.0 SP4 Microsoft Windows NT Server 4.0 SP3 Microsoft Windows NT Server 4.0 SP2 Microsoft Windows NT Server 4.0 SP1 Microsoft Windows NT Server 4.0 Microsoft Windows NT Enterprise Server 4.0 SP6a Microsoft Windows NT Enterprise Server 4.0 SP6 Microsoft Windows NT Enterprise Server 4.0 SP5 Microsoft Windows NT Enterprise Server 4.0 SP4 Microsoft Windows NT Enterprise Server 4.0 SP3 Microsoft Windows NT Enterprise Server 4.0 SP2 Microsoft Windows NT Enterprise Server 4.0 SP1 Microsoft Windows NT Enterprise Server 4.0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows NT PPTP DoS Vulnerability
A remote attacker could cause a denial of service condition in Windows NT. Submitting multiple maliciously crafted packets to the PPTP services will cause the consumption of all available system resources.
A remote attacker could cause a denial of service condition in Windows NT. Submitting multiple maliciously crafted packets to the PPTP services will cause the consumption of all available system resources.
Solution / Fix
Microsoft Windows NT PPTP DoS Vulnerability
Solution:
Microsoft has released a patch which rectifies this issue:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=27836
Solution:
Microsoft has released a patch which rectifies this issue:
http://www.microsoft.com/Downloads/Release.asp?ReleaseID=27836
References
Microsoft Windows NT PPTP DoS Vulnerability
References:
References: