PPTP patch not installed |
---|
Risk Level: | High | Check or Attack Name: PPTP3 Fix |
---|---|---|
Platforms: | Windows NT: 4.0 | |
Description: | The machine has an unpatched version of the Point to Point Tunneling Protocol (PPTP). Microsoft has made improvements to the native Virtual Private Networking (VPN) capabilities that significantly improve the performance and security of PPTP-based VPN connections via the Internet, especially for remote access or high-latency networks. |
|
Remedy: | Apply the latest Windows NT 4.0 Service Pack, or Windows NT 4.0 Service Pack 3 (SP3) users must apply the post-SP3 pptp3-fix patch. If possible, upgrade your web browser to strong encryption. To apply the latest Windows NT Service Pack, follow these steps:
—OR— Windows NT 4.0 Service Pack 3 (SP3) users must apply the post-SP3 pptp3-fix patch available from ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/pptp3-fix/. Note: Windows NT Servers running Routing and Remote Access Service (RRAS) must first apply the pptp3-fix performance upgrade followed by the RRAS Hotfix 3.0 to benefit from the upgrade (it is important not to reboot your machine in-between installations of the NT pptp3-fix and the Routing and Remote Access Service upgrade). For more information, see Microsoft Knowledge Base Article Q189594 "RRAS Upgrade for WinNT Server 4.0 Hotfix Pack 3.0 Release Notes" at http://support.microsoft.com/support/kb/articles/q189/5/94.asp or from ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/pptp3-fix/Q189594.TXT. —AND— US and Canadian customers can download the 128-bit version of this hotfix from http://mssecure.www.conxion.com/cgi-bin/ntitar.pl. |
|
References: | Microsoft Knowledge Base Article Q189595, PPTP Performance & Security Upgrade for WinNT 4.0 Release Notes, http://support.microsoft.com/support/kb/articles/q189/5/95.asp Microsoft Knowledge Base Article Q189595, PPTP Performance & Security Upgrade for WinNT 4.0 Release Notes, ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/pptp3-fix/Q189595.TXT Microsoft Download Server, Microsoft Strong Encryption Product Download (US and Canada Only), http://mssecure.www.conxion.com/cgi-bin/ntitar.pl Microsoft Knowledge Base Article Q189595, PPTP Performance & Security Upgrade for WinNT 4.0 Release Notes, http://support.microsoft.com/support/kb/articles/q189/5/95.asp |
Know Your Risks |