Design/Logic Flaw

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 Windows and OpenVPN Connect version 3.1 Windows allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder...

CVE-2014-5455

CVE-2014-5455 describes a local privilege-escalation via an unquoted service path in the ptservice service for PrivateTunnel (Windows) prior to v3.0 and OpenVPN Connect (Windows) before v3.1. A crafted program.exe placed in the %SYSTEMDRIVE% folder could be executed with elevated privileges by th...

CVE-2014-5455: Unquoted Search Path or Element

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 Windows and OpenVPN Connect version 3.1 Windows allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder...

PT-2014-6485

Name of the Vulnerable Software and Affected Versions PrivateTunnel versions prior to 3.0 OpenVPN Connect versions prior to 3.1 Description The issue allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder, due to an unquoted Windows search path...