| Package | Affected versions | Patched versions |
|---|---|---|
| pptp server | = 1.0.1= 1.1.2= 1.1.3= 1.1.3_2002-10-09= 1.1.4b1= 1.1.4b2 |
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free