CVE-2005-3409

Published Nov 2, 2005 CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Description
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-885-1 New OpenVPN packages fix several vulnerabilities
EUVD EUVD EUVD-2005-3408 OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:10 PM
Reserved
Nov 1, 2005, 12:00 AM
Status
Modified
Published
Nov 2, 2005, 12:02 AM
Modified
Jun 16, 2026, 10:16 PM