CVE-2006-1629
CVE-2006-1629
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://openvpn.net/changelog.htmlhttp://secunia.com/advisories/19531http://secunia.com/advisories/19598http://secunia.com/advisories/19837http://secunia.com/advisories/19897https://exchange.xforce.ibmcloud.com/vulnerabilities/25667http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482http://www.debian.org/security/2006/dsa-1045http://www.mandriva.com/security/advisories?name=MDKSA-2006:069http://www.novell.com/linux/security/advisories/2006_04_28.htmlhttp://www.osreviews.net/reviews/security/openvpn-printhttp://www.osvdb.org/24444