CVE-2008-3459

Published: Aug 4, 2008Modified: Apr 23, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Affected (11)

Products: Openvpn: Openvpn

Openvpn

1 product

Openvpn

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Openvpn Openvpn	Version 2.1 beta-14
Openvpn Openvpn	Version 2.1 beta-15
Openvpn Openvpn	Version 2.1 beta-16
Openvpn Openvpn	Version 2.1 rc_1
Openvpn Openvpn	Version 2.1 rc_2
Openvpn Openvpn	Version 2.1 rc_3
Openvpn Openvpn	Version 2.1 rc_4
Openvpn Openvpn	Version 2.1 rc_5
Openvpn Openvpn	Version 2.1 rc_6
Openvpn Openvpn	Version 2.1 rc_7
Openvpn Openvpn	Version 2.1 rc_8