7.6

CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openvpn ≫ Openvpn Version2.1 Updatebeta-14
Openvpn ≫ Openvpn Version2.1 Updatebeta-15
Openvpn ≫ Openvpn Version2.1 Updatebeta-16
Openvpn ≫ Openvpn Version2.1 Updaterc_1
Openvpn ≫ Openvpn Version2.1 Updaterc_2
Openvpn ≫ Openvpn Version2.1 Updaterc_3
Openvpn ≫ Openvpn Version2.1 Updaterc_4
Openvpn ≫ Openvpn Version2.1 Updaterc_5
Openvpn ≫ Openvpn Version2.1 Updaterc_6
Openvpn ≫ Openvpn Version2.1 Updaterc_7
Openvpn ≫ Openvpn Version2.1 Updaterc_8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.682
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C