CVE-2002-1214

Microsoft PPTP Service - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1214. PoCs published by aushack, including Metasploit module auxiliary/dos/pptp/ms02_063_pptp_dos.

AI-analyzed exploit summary This Metasploit module exploits a kernel overflow in Microsoft Windows 2000 SP0-3 and XP SP0-1 PPTP RAS servers by sending a malformed PPTP Control Data packet, resulting in a BSOD. The exploit triggers a denial of service by overwriting kernel memory with a large payload.

Description

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.

Exploits (1)

metasploit WORKING POC
by aushack · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/pptp/ms02_063_pptp_dos.rb

This Metasploit module exploits a kernel overflow in Microsoft Windows 2000 SP0-3 and XP SP0-1 PPTP RAS servers by sending a malformed PPTP Control Data packet, resulting in a BSOD. The exploit triggers a denial of service by overwriting kernel memory with a large payload.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Windows 2000 SP0-3, XP SP0-1 PPTP RAS servers
No auth needed
Prerequisites: Network access to target's PPTP port (1723)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5807
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10199.php
Vendor Advisory mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/293146

Scores

EPSS 0.5083
EPSS Percentile 98.8%

Details

Status published
Products (3)
microsoft/windows_2000 (4 CPE variants)
microsoft/windows_2000_terminal_services (4 CPE variants)
microsoft/windows_xp (3 CPE variants)
Published Oct 28, 2002
Tracked Since Feb 18, 2026