CVE-2006-1629
Fixed in a distro release EPSS 3%
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
Products: openvpn, openvpn_access_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openvpn | 2.0.6-1 |
| Debian 13 | openvpn | 2.0.6-1 |
| Debian 14 | openvpn | 2.0.6-1 |
| Debian 3.1 | openvpn | 2.0-1sarge3 |
| openSUSE Tumbleweed | openvpn | 2.5.3-1.2 |