Description

Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.

Remediation

References

CVE-2005-3393

Related Vulnerabilities

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2021-20185)

Liferay Portal CVE-2021-33330 Vulnerability (CVE-2021-33330)

WordPress Plugin Staff Directory-Employee Directory for WordPress Unspecified Vulnerability (3.6.1)

WordPress Plugin Slick Popup:Contact Form 7 Popup Privilege Escalation (1.7.1)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20518)

Severity

High

Classification

CVE-2005-3393

Tags

Missing Update Known Vulnerabilities