3130 matches found
CVE-2019-14657
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...
CVE-2019-14657
CVE-2019-14657 affects Yealink phones (through 2019-08-04) featuring an OpenVPN file upload where tar is executed as root to extract files without validating the extraction directory. An attacker can craft a tar containing ../../../../ to traverse directories and replace almost any file on the de...
PT-2019-13762
Name of the Vulnerable Software and Affected Versions Yealink phones versions prior to 2019-08-04 Description The issue is related to OpenVPN file upload in Yealink phones. It executes tar as root to extract files but does not validate the extraction directory. An attacker can create a tar file...
CVE-2019-14657: Improper Limitation of a Pathname to a Restricted Directory
Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directory. Creating a tar file with ../../../../ allows replacement of almost any file on a phone. This leads to password replacement and arbitra...
CVE-2008-3459
Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted 1 lladdr and 2 iproute configuration directives, probably related to shell metacharacters...
fly-admin-openvpn-server FLY Confidential Data Access
The vulnerability of the fly-admin-openvpn-server component in the FLY operating environment of the Astra Linux system is related to a validation error in the certificate. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
OpenVPN Server 2.0.x < 2.0.4 Denial of Service Vulnerability
According to its self-reported version number, the version of OpenVPN server installed on the remote Windows host is version 2.0.x prior to 2.0.4. It is, therefore, affected by a denial of service DoS vulnerability in its TCP/IP accept function component. An unauthenticated, remote attacker can...
OpenVPN Server 2.0.x < 2.0.3 Remote Code Execution Vulnerability
According to its self-reported version number, the version of OpenVPN server installed on the remote Windows host is version 2.0.x prior to 2.0.3. It is, therefore, affected by a remote command execution vulnerability in its DHCP component due to a format string vulnerability. An unauthenticated,...
PT-2019-20301
Уязвимость компонента fly-admin-openvpn-server рабочей среды FLY операционной системы Astra Linux связана с ошибкой валидации сертификата. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...
CVE-2019-12578
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpnlauncher.64 binary is setuid root. This binary executes /opt/pia/openvpn-64/openvpn, passing the...
CVE-2019-12578
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpnlauncher.64 binary is setuid root. This binary executes /opt/pia/openvpn-64/openvpn, passing the...
CVE-2019-12573
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to overwrite arbitrary files. The openvpnlauncher binary is setuid root. This binary supports the --log option, which accepts a path as an argument...
Design/Logic Flaw
A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpnlauncher.64 binary is setuid root. This binary accepts several...
PT-2019-12866
Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for macOS Description A local, authenticated attacker could run arbitrary code with elevated privileges due to a vulnerability in the openvpn launcher binary, which is setui...
PT-2019-12863
Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A local attacker could exploit this issue to overwrite arbitrary files, potentially leading to a denial of service condition and data loss. The openvpn launcher...
PT-2019-12867
Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for macOS Description A local attacker could exploit this issue to run arbitrary code with elevated privileges. The openvpn launcher.64 binary, which is setuid root, creates...
PT-2019-12869
Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn launcher.64 binary is setuid root and...
PT-2019-12868
Name of the Vulnerable Software and Affected Versions Private Internet Access PIA VPN Client version v82 for Linux Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The issue involves the openvpn launcher.64 binary, which is...