Description

OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.

Remediation

References

CVE-2006-2229

Related Vulnerabilities

MySQL CVE-2012-0115 Vulnerability (CVE-2012-0115)

Drupal Core 8.x.x Multiple Cross-Site Scripting Vulnerabilities (8.0.0 - 8.7.14)

Oracle JRE CVE-2012-0498 Vulnerability (CVE-2012-0498)

WordPress Plugin Frontier Post Security Bypass (1.3.2)

PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4662)

Severity

Medium

Classification

CVE-2006-2229

Tags

Missing Update Known Vulnerabilities