Description

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Remediation

References

CVE-2006-1629

Related Vulnerabilities

Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7932)

Microsoft SQL Server Elevation of Privilege Vulnerability (CVE-2021-1636)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.20)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.14)

PHP Improper Input Validation Vulnerability (CVE-2006-6383)

Severity

Critical

Classification

CVE-2006-1629

Tags

Missing Update Known Vulnerabilities