7.6

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openvpn ≫ Openvpn Version 2.1 Update beta-14
Openvpn ≫ Openvpn Version 2.1 Update beta-15
Openvpn ≫ Openvpn Version 2.1 Update beta-16
Openvpn ≫ Openvpn Version 2.1 Update rc_1
Openvpn ≫ Openvpn Version 2.1 Update rc_2
Openvpn ≫ Openvpn Version 2.1 Update rc_3
Openvpn ≫ Openvpn Version 2.1 Update rc_4
Openvpn ≫ Openvpn Version 2.1 Update rc_5
Openvpn ≫ Openvpn Version 2.1 Update rc_6
Openvpn ≫ Openvpn Version 2.1 Update rc_7
Openvpn ≫ Openvpn Version 2.1 Update rc_8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.12% 0.794
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://openvpn.net/index.php/documentation/change-log/changelog-21.html
http://www.securityfocus.com/bid/30532
http://www.securitytracker.com/id?1020626
http://www.vupen.com/english/advisories/2008/2316
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44209