Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.10622
Categoría:Service detection
Título:PPTP Service Detection
Resumen:The remote host seems to be running a PPTP (VPN) service, this service; allows remote users to connect to the internal network and play a trusted rule in it. This service should; be protect with encrypted username & password combinations, and should be accessible only to trusted; individuals. By default the service leaks out such information as Server version (PPTP version), Hostname; and Vendor string this could help an attacker better prepare her next attack.;; Also note that PPTP is not configured as being cryptographically; secure, and you should use another VPN method if you can.
Descripción:Summary:
The remote host seems to be running a PPTP (VPN) service, this service
allows remote users to connect to the internal network and play a trusted rule in it. This service should
be protect with encrypted username & password combinations, and should be accessible only to trusted
individuals. By default the service leaks out such information as Server version (PPTP version), Hostname
and Vendor string this could help an attacker better prepare her next attack.

Also note that PPTP is not configured as being cryptographically
secure, and you should use another VPN method if you can.

Solution:
Restrict access to this port from untrusted networks. Make sure
only encrypted channels are allowed through the PPTP (VPN) connection.

CVSS Score:
0.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:N

CopyrightCopyright (C) 2005 SecuriTeam

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.