CVE-2005-3393: High severity OpenVPN OpenVPN vulnerability
Published Nov 1, 2005
·Updated
Format string vulnerability in the foreignoption function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.
Affected Software
4 affected components
OpenVPN OpenVPN=2.0
OpenVPN OpenVPN=2.0_beta11
OpenVPN OpenVPN Access Server=2.0.1
OpenVPN OpenVPN Access Server=2.0.2
Remediation
Patch Available
Patch Available
Event History
Nov 1, 2005
CVE Published
12:47 PM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3393?
CVE-2005-3393 is considered critical due to its potential for remote code execution.
2
How do I fix CVE-2005-3393?
To fix CVE-2005-3393, upgrade to a patched version of OpenVPN, specifically 2.0.3 or later.
3
What software is affected by CVE-2005-3393?
CVE-2005-3393 affects OpenVPN versions 2.0, 2.0_beta11, and OpenVPN Access Server versions 2.0.1 and 2.0.2.
4
Can CVE-2005-3393 be exploited by remote clients?
Yes, CVE-2005-3393 can be exploited by remote clients through malicious DHCP option commands.
5
What type of vulnerability is CVE-2005-3393?
CVE-2005-3393 is a format string vulnerability that allows for arbitrary code execution.