Security fix for the ALT Linux 9 package openvpn version 2.0.6-alt1

April 6, 2006 Nikolay A. Fetisov 2.0.6-alt1 - New version 2.0.6 -- Security fixes for CVE-2005-3393, CVE-2005-3409, CVE-2006-1629 -- several minor bug fixes and improvements, see ChangeLog for details - Adding README.ALT - Updating init.d script - Building and packaging plugins...

CVE-2005-3393

Format string vulnerability in the foreignoption function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option...

CVE-2005-3393

OpenVPN 2.0.x is affected by CVE-2005-3393 due to a format-string vulnerability in the foreign_option function (options.c) used when pushing dhcp-option. This could allow a remote attacker to execute arbitrary code on non-Windows OpenVPN clients during TLS negotiation if the server/client configu...