OpenVPN — свободная реализация технологии виртуальной частной сети (VPN) с открытым исходным кодом для создания зашифрованных каналoв типа точка-точка или сервер-клиенты между компьютерами.
Релизный цикл, информация об уязвимостях
График релизов
Количество 254
CVE-2008-3459
Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.
CVE-2006-2229
OpenVPN 2.0.7 and earlier, when configured to use the --management opt ...
CVE-2006-2229
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
CVE-2006-1629
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute a ...
CVE-2006-1629
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
CVE-2006-1629
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
CVE-2005-3409
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote atta ...
CVE-2005-3409
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
CVE-2005-3409
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
CVE-2005-3393
Format string vulnerability in the foreign_option function in options. ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2008-3459 Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters. | CVSS2: 7.6 | 2% Низкий | около 18 лет назад |
| CVE-2006-2229 OpenVPN 2.0.7 and earlier, when configured to use the --management opt ... | CVSS2: 4 | 1% Низкий | больше 20 лет назад |
| CVE-2006-2229 OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service. | CVSS2: 4 | 1% Низкий | больше 20 лет назад |
| CVE-2006-1629 OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute a ... | CVSS2: 9 | 3% Низкий | больше 20 лет назад |
 | CVE-2006-1629 OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable. | CVSS2: 9 | 3% Низкий | больше 20 лет назад |
| CVE-2006-1629 OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable. | CVSS2: 9 | 3% Низкий | больше 20 лет назад |
| CVE-2005-3409 OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote atta ... | CVSS2: 5 | 2% Низкий | почти 21 год назад |
| CVE-2005-3409 OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler. | CVSS2: 5 | 2% Низкий | почти 21 год назад |
| CVE-2005-3409 OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler. | CVSS2: 5 | 2% Низкий | почти 21 год назад |
| CVE-2005-3393 Format string vulnerability in the foreign_option function in options. ... | CVSS2: 7.5 | 3% Низкий | почти 21 год назад |
Уязвимостей на страницу