CVE-2005-3393

Fixed in a distro release EPSS 3%

Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.

Published 2005-11-01 · CVE record · OSV

Products: openvpn, openvpn_access_server

Distro releases