ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
Loading...
Loading...
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.
May 12, 2003
April 16, 2026
Every time one of our enrichment pipelines (NVD, MITRE cvelistV5, EPSS, CISA KEV, GHSA, OSV, vendor advisories) ran against this CVE. Most recent first.
Working exploit code is in the public domain (1 Metasploit module) (5 Exploit-DB entries). Defenders should treat patch urgency accordingly — public PoCs typically lead to mass-exploitation within 24-72 hours.
PoPToP - Negative Read Overflow (Metasploit)
Open source ↗PoPToP PPTP 1.1.4-b3 - 'poptop-sane.c' Remote Command Execution
Open source ↗PoPToP PPTP 1.1.4-b3 - Remote Command Execution
Open source ↗PoPToP < 1.1.3-b3/1.1.3-20030409 - Negative Read Overflow (Metasploit)
Open source ↗PoPToP PPTP 1.0/1.1.x - Negative 'read()' Argument Remote Buffer Overflow
Open source ↗Poptop Negative Read Overflow
Open source ↗See which npm, PyPI, Go, and Maven packages are affected by CVE-2003-0213
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.