Re: [Openvpn-devel] OpenVPN 2.0.6 released

2006-04-05 Thread James Yonan
James: What is the MITRE CVE name for this vulnerability? CVE-2006-1629 James

Re: [Openvpn-devel] OpenVPN 2.0.6 released

2006-04-05 Thread Matthias Andree
On Wed, 05 Apr 2006, James Yonan wrote: > 2006.04.05 -- Version 2.0.6 > > * Security Vulnerability affecting OpenVPN 2.0 through 2.0.5. > An OpenVPN client connecting to a > malicious or compromised server could potentially receive > "setenv" configuration directives from the server which coul

[Openvpn-devel] OpenVPN 2.0.6 released

2006-04-05 Thread James Yonan
2006.04.05 -- Version 2.0.6 * Security Vulnerability affecting OpenVPN 2.0 through 2.0.5. An OpenVPN client connecting to a malicious or compromised server could potentially receive "setenv" configuration directives from the server which could cause arbitrary code execution on the client via