CVE-2005-3409: Medium severity OpenVPN OpenVPN vulnerability
Published Nov 2, 2005
·Updated
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
Affected Software
78 affected components
OpenVPN OpenVPN=2.0
OpenVPN OpenVPN=2.0.1_rc1
OpenVPN OpenVPN=2.0.1_rc2
OpenVPN OpenVPN=2.0.1_rc3
OpenVPN OpenVPN=2.0.1_rc4
OpenVPN OpenVPN=2.0.1_rc5
OpenVPN OpenVPN=2.0.1_rc6
OpenVPN OpenVPN=2.0.1_rc7
OpenVPN OpenVPN=2.0.2_rc1
OpenVPN OpenVPN=2.0.3_rc1
OpenVPN OpenVPN=2.0_beta1
OpenVPN OpenVPN=2.0_beta2
OpenVPN OpenVPN=2.0_beta3
OpenVPN OpenVPN=2.0_beta4
OpenVPN OpenVPN=2.0_beta5
OpenVPN OpenVPN=2.0_beta6
OpenVPN OpenVPN=2.0_beta7
OpenVPN OpenVPN=2.0_beta8
OpenVPN OpenVPN=2.0_beta9
OpenVPN OpenVPN=2.0_beta10
OpenVPN OpenVPN=2.0_beta11
OpenVPN OpenVPN=2.0_beta12
OpenVPN OpenVPN=2.0_beta13
OpenVPN OpenVPN=2.0_beta15
OpenVPN OpenVPN=2.0_beta16
OpenVPN OpenVPN=2.0_beta17
OpenVPN OpenVPN=2.0_beta18
OpenVPN OpenVPN=2.0_beta19
OpenVPN OpenVPN=2.0_beta20
OpenVPN OpenVPN=2.0_beta28
OpenVPN OpenVPN=2.0_rc1
OpenVPN OpenVPN=2.0_rc2
OpenVPN OpenVPN=2.0_rc3
OpenVPN OpenVPN=2.0_rc4
OpenVPN OpenVPN=2.0_rc5
OpenVPN OpenVPN=2.0_rc6
OpenVPN OpenVPN=2.0_rc7
OpenVPN OpenVPN=2.0_rc8
OpenVPN OpenVPN=2.0_rc9
OpenVPN OpenVPN=2.0_rc10
OpenVPN OpenVPN=2.0_rc11
OpenVPN OpenVPN=2.0_rc12
OpenVPN OpenVPN=2.0_rc13
OpenVPN OpenVPN=2.0_rc14
OpenVPN OpenVPN=2.0_rc15
OpenVPN OpenVPN=2.0_rc16
OpenVPN OpenVPN=2.0_rc17
OpenVPN OpenVPN=2.0_rc18
OpenVPN OpenVPN=2.0_rc19
OpenVPN OpenVPN=2.0_rc20
OpenVPN OpenVPN=2.0_rc21
OpenVPN OpenVPN=2.0_test1
OpenVPN OpenVPN=2.0_test2
OpenVPN OpenVPN=2.0_test3
OpenVPN OpenVPN=2.0_test5
OpenVPN OpenVPN=2.0_test6
OpenVPN OpenVPN=2.0_test7
OpenVPN OpenVPN=2.0_test8
OpenVPN OpenVPN=2.0_test9
OpenVPN OpenVPN=2.0_test10
OpenVPN OpenVPN=2.0_test11
OpenVPN OpenVPN=2.0_test12
OpenVPN OpenVPN=2.0_test14
OpenVPN OpenVPN=2.0_test15
OpenVPN OpenVPN=2.0_test16
OpenVPN OpenVPN=2.0_test17
OpenVPN OpenVPN=2.0_test18
OpenVPN OpenVPN=2.0_test19
OpenVPN OpenVPN=2.0_test20
OpenVPN OpenVPN=2.0_test21
OpenVPN OpenVPN=2.0_test22
OpenVPN OpenVPN=2.0_test23
OpenVPN OpenVPN=2.0_test24
OpenVPN OpenVPN=2.0_test26
OpenVPN OpenVPN=2.0_test27
OpenVPN OpenVPN=2.0_test29
OpenVPN OpenVPN Access Server=2.0.1
OpenVPN OpenVPN Access Server=2.0.2
Remediation
Patch Available
Event History
Nov 2, 2005
CVE Published
12:02 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3409?
The severity of CVE-2005-3409 is classified as high due to its ability to cause a denial of service.
2
How do I fix CVE-2005-3409?
To fix CVE-2005-3409, upgrade OpenVPN to version 2.0.4 or later.
3
What systems are affected by CVE-2005-3409?
CVE-2005-3409 affects OpenVPN versions prior to 2.0.4, specifically in TCP mode.
4
What type of vulnerability is CVE-2005-3409?
CVE-2005-3409 is a denial of service vulnerability resulting from a null dereference.
5
Can CVE-2005-3409 be exploited remotely?
Yes, CVE-2005-3409 can be exploited remotely by attackers to cause a segmentation fault.