CVE-2006-1629

EPSS 3.56%
Published 06.04.2006 22:04:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Affected products Warnungen 0 Metrics 2 CWE 0 References 17

Data is provided by the National Vulnerability Database (NVD)

Openvpn ≫ Openvpn Version2.0

Openvpn ≫ Openvpn Version2.0.4

Openvpn ≫ Openvpn Access Server Version2.0.1

Openvpn ≫ Openvpn Access Server Version2.0.2

Openvpn ≫ Openvpn Access Server Version2.0.3

Openvpn ≫ Openvpn Access Server Version2.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.56%	0.873

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

http://openvpn.net/changelog.html

Patch

http://secunia.com/advisories/19897

http://www.novell.com/linux/security/advisories/2006_04_28.html

http://secunia.com/advisories/19531

Patch

Vendor Advisory

http://secunia.com/advisories/19598

http://secunia.com/advisories/19837

http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482

http://www.debian.org/security/2006/dsa-1045

http://www.mandriva.com/security/advisories?name=MDKSA-2006:069

http://www.osreviews.net/reviews/security/openvpn-print

http://www.osvdb.org/24444

http://www.securityfocus.com/bid/17392

Patch

http://www.vupen.com/english/advisories/2006/1261

https://exchange.xforce.ibmcloud.com/vulnerabilities/25667

https://nvd.nist.gov/vuln/detail/CVE-2006-1629

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1629

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1629

EUVD