Description

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Remediation

References

CVE-2006-1629

Related Vulnerabilities

IBM RTC Other Vulnerability (CVE-2015-0112)

Oracle Database Server CVE-2007-0274 Vulnerability (CVE-2007-0274)

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4224)

WordPress Plugin ShareYourCart Information Disclosure (1.6.1)

Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-5024)

Severity

Critical

Classification

CVE-2006-1629

Tags

Missing Update Known Vulnerabilities