PT-2006-2627 · Openvpn · Openvpn

Hendrik Weimer · Published 2006-04-06 · Updated 2024-06-15 · CVE-2006-1629

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenVPN versions 2.0 through 2.0.5

Description: The issue allows remote malicious servers to execute arbitrary code on the client. This is achieved by using the setenv function with the LD PRELOAD environment variable, which can lead to code execution.

Recommendations: For OpenVPN versions 2.0 through 2.0.5, consider updating to a version where this issue is fixed, as using setenv with LD PRELOAD can pose a significant risk. As a temporary workaround, consider restricting the use of the LD PRELOAD environment variable in the client configuration to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-1629

DSA-1045-1

OPENSUSE-SU-2024:11128-1

Affected Products

Openvpn

References · 29

• https://nvd.nist.gov/vuln/detail/CVE-2006-1629 · Security Note
• http://secunia.com/advisories/19531 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11128-1 · Vendor Advisory
• http://securityfocus.com/bid/17392 · Patch
• http://mandriva.com/security/advisories?name=MDKSA-2006:069 · Vendor Advisory
• http://debian.org/security/2006/dsa-1045 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-1629 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1629 · Vendor Advisory
• http://openvpn.net/changelog.html · Patch
• https://security-tracker.debian.org/tracker/CVE-2006-1629 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_04_28.html · Vendor Advisory
• http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482 · Note
• http://secunia.com/advisories/19897 · Note
• http://vupen.com/english/advisories/2006/1261 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25667 · Note