Signature Detail

APP: PoPToP 'poptop-sane.c' Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Poptop PPTP Server for Linux. Poptop 1.0.1 and earlier versions are vulnerable. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of logged-in user.

Extended Description

A buffer-overflow vulnerability has been discovered in PoPToP PPTP. The problem occurs because the software fails to do sufficient sanity checks when referencing user-supplied input used in various calculations. As a result, an attacker may be able to trigger a condition that would corrupt sensitive memory. Successful exploits of this issue may allow attackers to execute arbitrary code with the privileges of the affected server.

Affected Products

• Poptop pptp_server 1.0.0
• Poptop pptp_server 1.0.1
• Poptop pptp_server 1.1.2
• Poptop pptp_server 1.1.3
• Poptop pptp_server 1.1.3 -20021009
• Poptop pptp_server 1.1.4 -b1
• Poptop pptp_server 1.1.4 -b2
• Red_hat linux 9.0.0 I386

References

• BugTraq: 7316
• CVE: CVE-2003-0213
• URL: http://www.securityfocus.com/archive/1/317995
• URL: http://www.kb.cert.org/vuls/id/673993
• URL: http://securityfocus.com/archive/1/317995
• URL: http://www.freewebs.com/blightninjas/