Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2005-3409
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-3409

Description:
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.

CVE Status:
Candidate

References:

SUSE
  http://www.novell.com/linux/security/advisories/2005_25_sr.html

SAID
  Secunia Advisory: SA17447
  Secunia Advisory: SA17376
  Secunia Advisory: SA17452
  Secunia Advisory: SA17480

OSVDB
  20416

OPENPKG
  http://www.securityfocus.com/archive/1/archive/1/415487

GENTOO
  http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml

DEBIAN
  http://www.debian.org/security/2005/dsa-885

CONFIRM
  http://openvpn.net/changelog.html

BID
  15270


Return to the previous page.