Back to Database
Status published
Medium
CVE-2005-3409
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows...
Vulnerability Description
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-3409
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/17447
- http://secunia.com/advisories/17480
- http://openvpn.net/changelog.html
- http://www.novell.com/linux/security/advisories/2005_25_sr.html
- http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml
- http://www.securityfocus.com/bid/15270
- http://www.securityfocus.com/archive/1/415487
- http://secunia.com/advisories/17452
- http://www.osvdb.org/20416
- http://www.debian.org/security/2005/dsa-885
- http://secunia.com/advisories/17376
More from openvpn
View All →CVE-2020-9442
OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN...
High
7.8
CVE-2020-8953
OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass...
Critical
9.8
CVE-2020-20813
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers...
High
7.5
CVE-2020-11810
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An...
Low
3.7
CVE-2020-11462
An issue was discovered in OpenVPN Access Server before 2.7.0...
High
7.5
Affected Vendor
openvpn
View all reports →Affected Software
openvpn, openvpn access server
Vulnerable Versions:
2.0, 2.0.1_rc1, 2.0.1_rc2, 2.0.1_rc3, 2.0.1_rc4, 2.0.1_rc5, 2.0.1_rc6, 2.0.1_rc7, 2.0.2_rc1, 2.0.3_rc1, 2.0_beta1, 2.0_beta2, 2.0_beta3, 2.0_beta4, 2.0_beta5, 2.0_beta6, 2.0_beta7, 2.0_beta8, 2.0_beta9, 2.0_beta10, 2.0_beta11, 2.0_beta12, 2.0_beta13, 2.0_beta15, 2.0_beta16, 2.0_beta17, 2.0_beta18, 2.0_beta19, 2.0_beta20, 2.0_beta28, 2.0_rc1, 2.0_rc2, 2.0_rc3, 2.0_rc4, 2.0_rc5, 2.0_rc6, 2.0_rc7, 2.0_rc8, 2.0_rc9, 2.0_rc10, 2.0_rc11, 2.0_rc12, 2.0_rc13, 2.0_rc14, 2.0_rc15, 2.0_rc16, 2.0_rc17, 2.0_rc18, 2.0_rc19, 2.0_rc20, 2.0_rc21, 2.0_test1, 2.0_test2, 2.0_test3, 2.0_test5, 2.0_test6, 2.0_test7, 2.0_test8, 2.0_test9, 2.0_test10, 2.0_test11, 2.0_test12, 2.0_test14, 2.0_test15, 2.0_test16, 2.0_test17, 2.0_test18, 2.0_test19, 2.0_test20, 2.0_test21, 2.0_test22, 2.0_test23, 2.0_test24, 2.0_test26, 2.0_test27, 2.0_test29, 2.0.1, 2.0.2
Timeline
Official Publish:
November 2nd, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.