• info
• discussion
• exploit
• solution
• references

PoPToP PPTP Negative read() Argument Remote Buffer Overflow Vulnerability

Solution:
The vendor has released updated versions of the PPTP server to address this issue. Please see the references for details.


PoPToP PPTP Server 1.0

• Debian pptpd_1.0.0-4.2_alpha.deb
  Debian GNU/Linux 2.2 (potato)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.0.0-4.2_a lpha.deb


• Debian pptpd_1.0.0-4.2_arm.deb
  Debian GNU/Linux 2.2 (potato)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.0.0-4.2_a rm.deb


• Debian pptpd_1.0.0-4.2_i386.deb
  Debian GNU/Linux 2.2 (potato)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.0.0-4.2_i 386.deb


• Debian pptpd_1.0.0-4.2_m68k.deb
  Debian GNU/Linux 2.2 (potato)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.0.0-4.2_m 68k.deb


• Debian pptpd_1.0.0-4.2_powerpc.deb
  Debian GNU/Linux 2.2 (potato)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.0.0-4.2_p owerpc.deb


• Debian pptpd_1.0.0-4.2_sparc.deb
  Debian GNU/Linux 2.2 (potato)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.0.0-4.2_s parc.deb

PoPToP PPTP Server 1.1.2

• Conectiva pptpd-1.1.2-412.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/pptpd-1.1.2-412.i586.r pm


• Debian pptpd_1.1.2-1.4_alpha.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_a lpha.deb


• Debian pptpd_1.1.2-1.4_arm.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_a rm.deb


• Debian pptpd_1.1.2-1.4_hppa.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_h ppa.deb


• Debian pptpd_1.1.2-1.4_i386.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_i 386.deb


• Debian pptpd_1.1.2-1.4_ia64.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_i a64.deb


• Debian pptpd_1.1.2-1.4_m68k.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_m 68k.deb


• Debian pptpd_1.1.2-1.4_mips.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_m ips.deb


• Debian pptpd_1.1.2-1.4_mipsel.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_m ipsel.deb


• Debian pptpd_1.1.2-1.4_powerpc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_p owerpc.deb


• Debian pptpd_1.1.2-1.4_s390.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_s 390.deb


• Debian pptpd_1.1.2-1.4_sparc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/p/pptpd/pptpd_1.1.2-1.4_s parc.deb


• S.u.S.E. pptpd-1.1.2-412.i386.patch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.0/n4/pptpd-1.1.2-412.i386.pa tch.rpm


• S.u.S.E. pptpd-1.1.2-413.i586.patch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/pptpd-1.1.2-413.i 586.patch.rpm


• S.u.S.E. pptpd-1.1.2-418.i586.patch.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/pptpd-1.1.2-418.i 586.patch.rpm


• S.u.S.E. pptpd-1.1.2-132.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/n3/pptpd-1.1.2-132.sparc. rpm


• S.u.S.E. pptpd-1.1.2-262.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n3/pptpd-1.1.2-262.ppc.rpm


• S.u.S.E. pptpd-1.1.2-411.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/n3/pptpd-1.1.2-411.i386.rp m


• S.u.S.E. pptpd-1.1.2-412.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n3/pptpd-1.1.2-412.i386.rp m


• S.u.S.E. pptpd-1.1.2-412.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.0/n4/pptpd-1.1.2-412.i386.rp m


• S.u.S.E. pptpd-1.1.2-413.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/pptpd-1.1.2-413.i 586.rpm


• S.u.S.E. pptpd-1.1.2-418.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/pptpd-1.1.2-418.i 586.rpm

PoPToP PPTP Server 1.1.3 -20021009

• PoPToP pptpd-1.1.3-20030409.tar.gz
  http://sourceforge.net/project/showfiles.php?group_id=44827

PoPToP PPTP Server 1.1.3

• PoPToP pptpd-1.1.3-20030409.tar.gz
  http://sourceforge.net/project/showfiles.php?group_id=44827

PoPToP PPTP Server 1.1.4 -b1

• PoPToP pptpd-1.1.4-b3.tar.gz
  http://sourceforge.net/project/showfiles.php?group_id=44827

PoPToP PPTP Server 1.1.4 -b2

• PoPToP pptpd-1.1.4-b3.tar.gz
  http://sourceforge.net/project/showfiles.php?group_id=44827