CVE-2014-9104

Mô tả

Tham khảo

• openvpn.net/index.php/access-server/security-advisories.html · Vendor Advisory
• seclists.org/fulldisclosure/2014/Jul/76 · Exploit
• securityfocus.com/archive/1/532795/100/0/threaded
• sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-1_OpenVPN_Access_Server_Desktop_Client_Remote_Code_Execution_via_CSRF_v10.txt · Exploit
• youtube.com/watch · Exploit

Lỗ hổng khác của openvpn access server

• CVE-2025-3110CAO 7.5OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform H…
• CVE-2023-46850NGHIÊM TRỌNG 9.8Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net…
• CVE-2023-46849CAO 7.5Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero be…
• CVE-2021-4234CAO 7.5OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the cl…
• CVE-2022-33738CAO 7.5OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal