Hendrik Weimer has reported a vulnerability in OpenVPN, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to OpenVPN clients allowing the server to transmit environment variables including LD_PRELOAD to client-side shell scripts via "setenv" configuration directives. This can be exploited to execute arbitrary code on a vulnerable client by placing a malicious file in a known location and load this.

Successful exploitation requires that a user connects to a malicious server.

The vulnerability has been reported in versions 2.0 through 2.0.5.

Solution
Update to version 2.0.6.

Provided and/or discovered by
Hendrik Weimer

Original Advisory
OpenVPN:
http://openvpn.net/changelog.html

Hendrik Weimer:
http://www.osreviews.net/reviews/security/openvpn-print

Deep Links
Links available in Customer Area