OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2005.023
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2005.023
Advisory Published:      2008-08-07 22:01 UTC

Issue Id (internal):     OpenPKG-SI-20051102.01
Issue First Created:     2005-11-02
Issue Last Modified:     2006-11-28
Issue Revision:          08


Subject Name:            OpenVPN
Subject Summary:         Virtual Private Network Facility
Subject Home:            http://openvpn.sourceforge.net/
Subject Versions:        * <= 2.0.2

Vulnerability Id:        CVE-2005-3393, CVE-2005-3409
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           remote network
Attack Impact:           denial of service, arbitrary code execution

Description:
    According to a BUGTRAQ report [0], a Denial of Service (DoS)
    vulnerability exists in the OpenVPN [1] network security application.
    The vulnerability allows a malicious or compromised server to execute
    arbitrary code on the client. CVE-2005-3393
    
    Additionally, another DoS situation can occur if OpenVPN in TCP server
    mode receives an error on accept(2) and the resulting exception
    handler causes a segmentation fault. CVE-2005-3409

References:
    [0]  http://marc.theaimsgroup.com/?l=bugtraq&m=113081023121059&w=2
    [1]  http://www.openvpn.net/
    [2]  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3393
    [3]  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3409
    [4]  http://www.openpkg.org/tutorial.html#regular-source
    [5]  http://www.openpkg.org/tutorial.html#regular-binary
    [6]  ftp://ftp.openpkg.org/release/2.5/UPD/openvpn-2.0.2-2.5.1.src.rpm
    [7]  ftp://ftp.openpkg.org/release/2.4/UPD/openvpn-2.0-2.4.1.src.rpm
    [8]  ftp://ftp.openpkg.org/release/2.5/UPD/
    [9]  ftp://ftp.openpkg.org/release/2.4/UPD/
    [10] http://www.openpkg.org/security.html#signature


Primary Package Name:    openvpn
Primary Package Home:    http://openpkg.org/go/package/openvpn

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Community        2.4-SOLID         openvpn-2.0-2.4.0
OpenPKG Community        2.5-SOLID         openvpn-2.0.2-2.5.0
OpenPKG Community        CURRENT           openvpn-2.0.2-20050928

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Community        2.4-SOLID         openvpn-2.0-2.4.1
OpenPKG Community        2.5-SOLID         openvpn-2.0.2-2.5.1
OpenPKG Community        CURRENT           openvpn-2.0.4-20051102