CVE-2003-0213: Poptop Pptp Server

High severity, CVSS 7.5. EPSS: 70.9% chance of exploitation in the next 30 days.

ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length field of 0 or 1, which causes a negative value to be fed into a read operation, leading to a buffer overflow.

Affected products

• Poptop Pptp Server: version 1.0.1 only; version 1.1.2 only; version 1.1.3 only; version 1.1.3_2002-10-09 only; version 1.1.4b1 only; version 1.1.4b2 only

Published 2003-05-12. Last modified 2026-06-16.