Description

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Remediation

References

CVE-2006-1629

Related Vulnerabilities

MySQL CVE-2018-2646 Vulnerability (CVE-2018-2646)

Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-6975)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.5.34)

Roundcube Files or Directories Accessible to External Parties Vulnerability (CVE-2017-16651)

WordPress Plugin ShareThis Dashboard for Google Analytics Cross-Site Scripting (2.5.1)

Severity

Critical

Classification

CVE-2006-1629

Tags

Missing Update Known Vulnerabilities