Unencapsulated MS-CHAP v2 Authentication Could Allow Information Disclosure

[Praetor]

this article was released in 20/08, but it's important: http://technet.microsoft.com/en-us/security/advisory/2743314

So if your are using a VPN with PPTP, better change to something more secure (PEAP, L2TP, IPSEC).