Vulnerability in Openvpn
CVE-2006-2229
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive inform…
EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.
Affected products
- Openvpn — versions 2.0, 2.0.1_rc1, 2.0.1_rc2
- Openvpn Openvpn_access_server — versions 2.0.1, 2.0.2, 2.0.5
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)