Topic: MS PPTP bug #2743314

[Jáder]

I've seen this: http://technet.microsoft.com/pt-br/security/advisory/2743314
about a bug in PPTP+ CHAP.
I'm not sure if this affect our beloved SME servers... so here am I to ask all you:

    Should I disable PPTP as VPN on my SME 7.x and SME8.x servers?


Jáder

[CharlieBrady]

If you concerned that anyone along the datapath between your users and your server might capture the PPTP traffic, and recover from the traffic your users passwords, then you should disable PPTP. Usually it will only be ISPs along the path who are able to do that.