Check Point Advisories

Security Best Practice: PPTP Protocol Enforcement

Check Point Reference:	SBP-2006-17
Date Published:	2 Jan 2006
Severity:	Low
Last Updated:	Sunday 01 January, 2006
Source:	SmartDefense Research Center
Protection Provided by:
Who is Vulnerable?	Products that implement the PPTP protocol
Vulnerability Description	The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual private networks. PPTP uses a control channel over TCP and a GRE tunnel operating to encapsulate PPP packets.
Vulnerability Details	PPTP has been the subject of many security analyses and serious security vulnerabilities have been found in the protocol. The known vulnerabilities relate to the underlying PPP authentication protocols used, the design of the MPPE protocol as well as the integration between MPPE and PPP authentication for session key establishment.