Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-1629 Details

Description

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://openvpn.net/changelog.html	CVE	Patch
http://secunia.com/advisories/19531	CVE	PatchVendor Advisory
http://secunia.com/advisories/19598	CVE
http://secunia.com/advisories/19837	CVE
http://secunia.com/advisories/19897	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/25667	CVE
http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482	CVE
http://www.debian.org/security/2006/dsa-1045	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:069	CVE
http://www.novell.com/linux/security/advisories/2006_04_28.html	CVE
http://www.osreviews.net/reviews/security/openvpn-print	CVE
http://www.osvdb.org/24444	CVE
http://www.securityfocus.com/bid/17392	CVE	Patch
http://www.vupen.com/english/advisories/2006/1261	CVE
http://openvpn.net/changelog.html	[email protected]	Patch
http://secunia.com/advisories/19531	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/19598	[email protected]
http://secunia.com/advisories/19837	[email protected]
http://secunia.com/advisories/19897	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/25667	[email protected]
http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482	[email protected]
http://www.debian.org/security/2006/dsa-1045	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:069	[email protected]
http://www.novell.com/linux/security/advisories/2006_04_28.html	[email protected]
http://www.osreviews.net/reviews/security/openvpn-print	[email protected]
http://www.osvdb.org/24444	[email protected]
http://www.securityfocus.com/bid/17392	[email protected]	Patch
http://www.vupen.com/english/advisories/2006/1261	[email protected]

see all 28 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
openvpn openvpn	2.0 2.0.4
CPE cpe:2.3:a:openvpn:openvpn:2.0:::::::* cpe:2.3:a:openvpn:openvpn:2.0.4:::::::* Remediation No remediation found in references.
openvpn openvpn access server	2.0.1 2.0.2 2.0.3 2.0.5
CPE cpe:2.3:a:openvpn:openvpn_access_server:2.0.1:::::::* cpe:2.3:a:openvpn:openvpn_access_server:2.0.2:::::::* cpe:2.3:a:openvpn:openvpn_access_server:2.0.3:::::::* cpe:2.3:a:openvpn:openvpn_access_server:2.0.5:::::::* Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 12, 2020	CPE Deprecation Remap	[email protected]
May 12, 2020	CPE Deprecation Remap	[email protected]
May 12, 2020	CPE Deprecation Remap	[email protected]
May 12, 2020	CPE Deprecation Remap	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Apr 7, 2006	Initial Analysis	[email protected]