[pptp-server] Re: [Poptop-server] PPTP Security Issue

[R. de Vroede]

I just got word back from Stephan Hoffmann (phion Information Technologies),
one of the two discoverers of the vulnerability.
He tested it on Poptop 1.1.3 and it's NOT affected by this vulnerability.

Regards,
Richard


>Folks,
>
>There was a serious security issue with PPTP clients and servers that was
>released yesterday. The posting on the Bugtraq list is here:
>
>http://online.securityfocus.com/archive/1/293146/2002-09-24/2002-09-30/0
>
>Since the details are somewhat scarce, it isn't possible to verify if
>PoPToP is vulnerable to this or not. Can one of the PoPToP developers
>email the folks that created this advisory and obtain more specific
>information? I'd like to find out if PoPToP is vulnerable to this.
>
>Thanks,
>
>-Robert
>
>--
>Robert Brown
>Email:   shox at shox.org
>Web:     http://www.shox.org
>PGP Key: http://www.shox.org/rjbpgp.asc