Test ID:	1.3.6.1.4.1.25623.1.0.56666
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1045-1)
Summary:	The remote host is missing an update for the Debian 'openvpn' package(s) announced via the DSA-1045-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'openvpn' package(s) announced via the DSA-1045-1 advisory. Vulnerability Insight: Hendrik Weimer discovered that OpenVPN, the Virtual Private Network daemon, allows to push environment variables to a client allowing a malicious VPN server to take over connected clients. The old stable distribution (woody) does not contain openvpn packages. For the stable distribution (sarge) this problem has been fixed in version 2.0-1sarge3. For the unstable distribution (sid) this problem has been fixed in version 2.0.6-1. We recommend that you upgrade your openvpn package. Affected Software/OS: 'openvpn' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1629 BugTraq ID: 17392 http://www.securityfocus.com/bid/17392 Debian Security Information: DSA-1045 (Google Search) http://www.debian.org/security/2006/dsa-1045 http://www.mandriva.com/security/advisories?name=MDKSA-2006:069 http://www.osreviews.net/reviews/security/openvpn-print http://www.osvdb.org/24444 http://secunia.com/advisories/19531 http://secunia.com/advisories/19598 http://secunia.com/advisories/19837 http://secunia.com/advisories/19897 SuSE Security Announcement: SUSE-SR:2006:009 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_28.html http://www.vupen.com/english/advisories/2006/1261 XForce ISS Database: openvpn-ldpreload-code-execution(25667) https://exchange.xforce.ibmcloud.com/vulnerabilities/25667
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.