Lucene search

K
nvd[email protected]NVD:CVE-2008-3459
HistoryAug 04, 2008 - 7:41 p.m.

CVE-2008-3459

2008-08-0419:41:00
CWE-16
web.nvd.nist.gov

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Affected configurations

NVD
Node
openvpnopenvpnMatch2.1beta-14
OR
openvpnopenvpnMatch2.1beta-15
OR
openvpnopenvpnMatch2.1beta-16
OR
openvpnopenvpnMatch2.1rc_1
OR
openvpnopenvpnMatch2.1rc_2
OR
openvpnopenvpnMatch2.1rc_3
OR
openvpnopenvpnMatch2.1rc_4
OR
openvpnopenvpnMatch2.1rc_5
OR
openvpnopenvpnMatch2.1rc_6
OR
openvpnopenvpnMatch2.1rc_7
OR
openvpnopenvpnMatch2.1rc_8

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.1%