CVE-2008-3459

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Link	Resource
http://openvpn.net/index.php/documentation/change-log/changelog-21.html
http://www.securitytracker.com/id?1020626
http://www.securityfocus.com/bid/30532
http://www.vupen.com/english/advisories/2008/2316	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44209

Configuration 1

cpe:2.3:a:openvpn:openvpn:2.1:rc_2:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_8:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_5:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:beta-14:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:beta-15:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_7:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_4:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:beta-16:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_1:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_6:*:*:*:*:*:* cpe:2.3:a:openvpn:openvpn:2.1:rc_3:*:*:*:*:*:*

---

Published : 2008-08-04 07:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3459

Mitre link : CVE-2008-3459

No products.

CWE-16

NVD-CWE-noinfo