CVE-2006-1629
CVE-2006-1629
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
EPSS 3.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25667
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:069
- http://www.vupen.com/english/advisories/2006/1261
- http://www.securityfocus.com/bid/17392
- http://openvpn.net/changelog.html
- http://www.osreviews.net/reviews/security/openvpn-print
- http://secunia.com/advisories/19531
- http://www.debian.org/security/2006/dsa-1045
- http://secunia.com/advisories/19598
- http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482
- http://secunia.com/advisories/19837
- http://www.osvdb.org/24444
- http://secunia.com/advisories/19897
- http://www.novell.com/linux/security/advisories/2006_04_28.html
- https://nvd.nist.gov/vuln/detail/CVE-2006-1629