CVE-2005-0311: Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administr...

Security readout for executives and security teams

An authenticated PPTP VPN user on Ingate Firewall 4.1.3 or earlier may keep access after an administrator disables that user's access to a resource. The main risk is delayed revocation: a user who should be cut off may remain connected until the session ends or is otherwise terminated. Exposure is most likely where Ingate Firewall 4.1.3 or earlier is still deployed and PPTP access is enabled. The issue affects already-authenticated users with active PPTP sessions, not unauthenticated internet users. Treat as a targeted access-revocation risk, not a broad unauthenticated compromise. Prioritize if legacy Ingate firewalls still protect sensitive resources or support PPTP VPN users. Mitigation focus: Identify any Ingate Firewall deployments and firmware versions.; Review Ingate release notes and vendor guidance for corrected firmware.; Disable PPTP if it is no longer required..

Prepared

Jun 30, 2026, 01:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.