CVE-2003-0213

CVE-2003-0213 describes a denial-of-service vulnerability in PoPToP PPTP server versions prior to 1.1.4-b3. A remote attacker can exploit this by sending a malformed PPTP control packet with a length field of 0 or 1, leading to a negative value being used in a read operation and subsequently a buffer overflow. This vulnerability carries a CVSS score of 7.5, indicating high severity with network-based exploitation, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not listed on the KEV catalog, multiple Metasploit modules and ExploitDB entries confirm the existence of public exploit code, demonstrating its exploitability. Despite this, there is no recorded community discussion or media coverage, suggesting limited public awareness or active exploitation in the wild.