l2tpd Malformed Data Remote DoS

medium Nessus Plugin ID 11494

Language:

Synopsis

The remote host is running a network tunneling application.

Description

The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack.

An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it.

Solution

Remove the software as it is no longer supported.

See Also

http://www.nessus.org/u?ceabd3b2

http://www.nessus.org/u?aabbdfb4

Plugin Details

Severity: Medium

ID: 11494

File Name: l2tpd_dos.nasl

Version: 1.15

Type: remote

Published: 3/28/2003

Updated: 8/10/2018

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P