7.6

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Data is provided by the National Vulnerability Database (NVD)
Openvpn ≫ Openvpn Version2.1 Updatebeta-14
Openvpn ≫ Openvpn Version2.1 Updatebeta-15
Openvpn ≫ Openvpn Version2.1 Updatebeta-16
Openvpn ≫ Openvpn Version2.1 Updaterc_1
Openvpn ≫ Openvpn Version2.1 Updaterc_2
Openvpn ≫ Openvpn Version2.1 Updaterc_3
Openvpn ≫ Openvpn Version2.1 Updaterc_4
Openvpn ≫ Openvpn Version2.1 Updaterc_5
Openvpn ≫ Openvpn Version2.1 Updaterc_6
Openvpn ≫ Openvpn Version2.1 Updaterc_7
Openvpn ≫ Openvpn Version2.1 Updaterc_8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.59% 0.682
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C