Code injection

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-13133

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-13133

Connected documents indicate CVE-2018-13133 concerns Golden Frog VyprVPN prior to 2018-06-21 and a Windows installer vulnerability. The PRION record lists the issue as “Code injection” with no further technical specifics, and other sources reiterate the vulnerable timeframe without detailing root...

CVE-2018-13133

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

PT-2018-11623

Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN versions prior to 2018-06-21 Description The issue is related to the installation process of Golden Frog VyprVPN on Windows. Recommendations For versions prior to 2018-06-21, update to a version released after 2018-06-21 to...

CVE-2018-13133: Untrusted Search Path

Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows...

CVE-2018-10645

CVE-2018-10645 affects Golden Frog VyprVPN 2.12.1.8015 for Windows. The VyprVPN service exposes a NetNamedPipe endpoint; its SetProperty method allows configuring AdditionalOpenVpnParameters and OpenVPN command line, enabling a dynamic library plugin via the OpenVPN plugin parameter to run code u...

CVE-2018-10645: Incorrect Permission Assignment for Critical Resource

Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker t...

PT-2018-10023

Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN version 2.12.1.8015 Description The issue allows for SYSTEM privilege escalation through the "VyprVPN" service, which establishes a NetNamedPipe endpoint. This endpoint exposes methods that can be called by applications,...

Code injection

In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forci...

CVE-2017-17809

In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forci...

CVE-2017-17809

The CVE-2017-17809 entry affects Golden Frog VyprVPN for macOS prior to 2.15.0.5828. The vyprvpnservice launch daemon exposes an unprotected XPC service that lets attackers update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary. An attacker could abuse this to ...

CVE-2017-17809: Untrusted Search Path

In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forci...

PT-2017-15014

Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN versions prior to 2.15.0.5828 Description The issue concerns an unprotected XPC service in the vyprvpnservice launch daemon, which allows attackers to modify the OpenVPN configuration and arguments passed to the OpenVPN...