ID |
CVE-2006-2229
|
Sažetak |
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service. |
Reference |
|
CVSS |
Base: | 4.0 |
Impact: | 4.9 |
Exploitability: | 4.9 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
HIGH |
NONE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
PARTIAL |
NONE |
PARTIAL |
|
CVSS vektor |
AV:N/AC:H/Au:N/C:P/I:N/A:P |
Zadnje važnije ažuriranje |
12-05-2020 - 14:21 |
Objavljeno |
05-05-2006 - 19:02 |