CVE-2007-0244

MEDIUM 5.0CVE-2007-0244 · Published 11/05/2007 · updated 16/06/2026

In short

CVE-2007-0244 is a MEDIUM (CVSS 5.0) vulnerability affecting pptp server (poptop).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pptp server poptop	`≤ 1.3.3`	No fix yet

Description

pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connection tear-down) via (1) GRE packets with out-of-order sequence numbers or (2) certain GRE packets that are processed using a wrong pointer and improperly dequeued.

References

secunia.com/advisories/25220
secunia.com/advisories/25255
secunia.com/advisories/26987
security.gentoo.org/glsa/glsa-200705-18.xml
sourceforge.net/project/shownotes.php
debian.org/security/2007/dsa-1288 · Patch
novell.com/linux/security/advisories/2007_10_sr.html
novell.com/linux/security/advisories/2007_19_sr.html
securityfocus.com/bid/23886
securitytracker.com/id
trustix.org/errata/2007/0017
ubuntu.com/usn/usn-459-1
ubuntu.com/usn/usn-459-2
vupen.com/english/advisories/2007/1743

More vulnerabilities in pptp server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free