CVEvulnerability

CVE-2003-0213

7.5 HIGH Published 2003-05-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-05-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.

Affected configurations

• poptop pptp server 1.0.1 • poptop pptp server 1.1.2 • poptop pptp server 1.1.3 • poptop pptp server 1.1.3 2002-10-09 • poptop pptp server 1.1.4b1 • poptop pptp server 1.1.4b2

References