| Package | Affected versions | Patched versions |
|---|---|---|
| openvpn | = 2.0= 2.0.1_rc1= 2.0.1_rc2= 2.0.1_rc3= 2.0.1_rc4= 2.0.1_rc5= 2.0.1_rc6= 2.0.1_rc7= 2.0.2_rc1= 2.0.3_rc1= 2.0.4= 2.0.6_rc1= 2.0_beta1= 2.0_beta10= 2.0_beta11= 2.0_beta12= 2.0_beta13= 2.0_beta15= 2.0_beta16= 2.0_beta17= 2.0_beta18= 2.0_beta19= 2.0_beta2= 2.0_beta20= 2.0_beta28= 2.0_beta3= 2.0_beta4= 2.0_beta5= 2.0_beta6= 2.0_beta7= 2.0_beta8= 2.0_beta9= 2.0_rc1= 2.0_rc10= 2.0_rc11= 2.0_rc12= 2.0_rc13= 2.0_rc14= 2.0_rc15= 2.0_rc16= 2.0_rc17= 2.0_rc18= 2.0_rc19= 2.0_rc2= 2.0_rc20= 2.0_rc21= 2.0_rc3= 2.0_rc4= 2.0_rc5= 2.0_rc6= 2.0_rc7= 2.0_rc8= 2.0_rc9= 2.0_test1= 2.0_test10= 2.0_test11= 2.0_test12= 2.0_test14= 2.0_test15= 2.0_test16= 2.0_test17= 2.0_test18= 2.0_test19= 2.0_test2= 2.0_test20= 2.0_test21= 2.0_test22= 2.0_test23= 2.0_test24= 2.0_test25= 2.0_test26= 2.0_test27= 2.0_test29= 2.0_test3= 2.0_test4= 2.0_test5= 2.0_test6= 2.0_test7= 2.0_test8= 2.0_test9 | |
| openvpn access server | = 2.0.1= 2.0.2= 2.0.5= 2.0.6= 2.0.7 |
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free