MS01-009: Malformed PPTP Packet Stream Remote DoS (283001)
Medium Nessus Plugin ID 10615
SynopsisA flaw in the remote PPTP implementation could allow an attacker to cause a denial of service.
DescriptionThe hotfix for the 'Malformed PPTP Packet Stream' problem has not been applied. This hotfix corrects a memory leak in Windows NT PPTP implementation that could cause it to use all the resources of the remote host.
An attacker could use this flaw by sending malformed PPTP packets to the remote host until no more memory is available. This would result in a denial of service of the remote service or the whole system.
SolutionMicrosoft has released a set of patches for Windows NT 4.0.