SnapGear Inc. announced today that their VPN Firewall appliances are free from issues recently discovered in Microsoft Windows PPTP software. Phion Information Technologies has reported a security vulnerability in the PPTP (Point-to-Point-Tunneling-Protocol) service that ships with Windows 2000 and Windows XP. The problem is that a specially crafted PPTP packet can cause a buffer overflow and overwrite kernel memory. An immediate implication is that affected systems are vulnerable to DoS (Denial of Service) attacks, but it may also be possible to execute code of the attacker's choice which could lead to a complete system compromise.
|