Description

Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.

Remediation

References

CVE-2005-3393

Related Vulnerabilities

WordPress Plugin Store Locator Plus for WordPress Cross-Site Scripting (5.5.15)

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10219)

Atlassian Jira CVE-2019-20898 Vulnerability (CVE-2019-20898)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11034)

WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.9)

Severity

High

Classification

CVE-2005-3393

Tags

Missing Update Known Vulnerabilities