Approved changes feed: RSS · Atom
cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Openvpn (69250643-f594-58ab-9395-086994cbe5f3) |
|---|---|
| Product | Openvpn (cff78dd9-2909-5405-93d7-f62ace8a52df) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/openvpn |
purl2cpe | 2026-06-01 10:12:10.793665 |
pkg:deb/ubuntu/openvpn |
purl2cpe | 2026-06-01 10:12:10.793667 |
pkg:github/openvpn/openvpn |
purl2cpe | 2026-06-01 10:12:10.793668 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2229 |
vulnerable | 2026-06-08 04:49:06.053676 |
Details available
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
Published: 2006-05-05T19:00:00.000Z
Updated: 2024-08-07T17:43:28.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1629 |
vulnerable | 2026-06-08 04:48:57.666935 |
Details available
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
Published: 2006-04-06T22:00:00.000Z
Updated: 2024-08-07T17:19:48.809Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3409 |
vulnerable | 2026-06-08 04:48:40.642455 |
Details available
OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.
Published: 2005-11-02T00:00:00.000Z
Updated: 2024-08-07T23:10:08.881Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3393 |
vulnerable | 2026-06-08 04:48:40.588971 |
Details available
Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.
Published: 2005-11-01T11:00:00.000Z
Updated: 2024-08-07T23:10:08.617Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2534 |
vulnerable | 2026-06-08 04:48:29.601972 |
Details available
Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
Published: 2005-08-24T04:00:00.000Z
Updated: 2024-08-07T22:30:01.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2533 |
vulnerable | 2026-06-08 04:48:29.599856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2532 |
vulnerable | 2026-06-08 04:48:29.597455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2531 |
vulnerable | 2026-06-08 04:48:29.536646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.