VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 4, 2008· Updated Apr 23, 2026

CVE-2008-3459

CVE-2008-3459

Description

Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters.

Affected products

11
  • OpenVPN/OpenVPN11 versions
    cpe:2.3:a:openvpn:openvpn:2.1:beta-14:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:openvpn:openvpn:2.1:beta-14:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:beta-15:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:beta-16:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_1:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_2:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_3:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_4:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_5:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_6:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_7:*:*:*:*:*:*
    • cpe:2.3:a:openvpn:openvpn:2.1:rc_8:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.