← Database

CVE-2008-3459

HIGH CVSS: 7.6 Published: 2008-08-04 Modified: 2026-06-16

Description

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Affected Platforms

Openvpn Openvpn

Weakness Type

CWE-16, NVD-CWE-noinfo

References