Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Gentoo: GLSA-200511-07 Critical: OpenVPN Code Execution and DoS

gentoo
Calendar Grey November 6, 2005
Scroller Gentoo
A series of security flaws detected in OpenVPN may allow for remote code execution and Denial of Service incidents that compromise Gentoo systems.
The OpenVPN client is potentially vulnerable to the execution of arbitrary code and the OpenVPN server is vulnerable to a Denial of Service issue

Summary

Gentoo Linux Security Advisory GLSA 200511-07 https://security.gentoo.org/ Severity: Normal Title: OpenVPN: Multiple vulnerabilities Date: November 06, 2005 Bugs: #111116 ID: 200511-07

Synopsis ======= The OpenVPN client is potentially vulnerable to the execution of arbitrary code and the OpenVPN server is vulnerable to a Denial of Service issue.
Background ========= OpenVPN is a multi-platform, full-featured SSL VPN solution.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/openvpn < 2.0.4 >= 2.0.4
========== The OpenVPN client contains a format string bug in the handling of the foreign_option in options.c. Furthermore, when the OpenVPN server ...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround