CVE-2006-1629: openvpn

EPSS trend

Probability

3.09%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

+0.07 pp

From 3.02% on 21-09-2026

21-09-202621-10-2026

EPSS score

3.09%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

exchange.xforce.ibmcloud.com/vulnerabilities/25667VDB EntryX Refsource XF
www.mandriva.com/security/advisories?name=MDKSA-2006:069Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2006/1261VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/17392VDB EntryX Refsource BIDPatch
openvpn.net/changelog.htmlX Refsource CONFIRMPatch
www.osreviews.net/reviews/security/openvpn-printX Refsource MISC
secunia.com/advisories/19531Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.debian.org/security/2006/dsa-1045Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/19598Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482X Refsource CONFIRM

Show all 15 references

secunia.com/advisories/19837Third Party AdvisoryX Refsource SECUNIA
www.osvdb.org/24444VDB EntryX Refsource OSVDB
secunia.com/advisories/19897Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_04_28.htmlVendor AdvisoryX Refsource SUSE
security-tracker.debian.org/tracker/CVE-2006-1629Advisory

Related vulnerabilities

CVE-2018-9336alpineopenvpn+40.59%8y ago01-05-2018 18:00openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.CVE-2018-7544debianopenvpn+31.79%8y ago16-03-2018 15:00A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password, and when no other clients are connected to this interface, attackers can execute arbitrary management commands, obtain sensitive information, or cause a denial of service (SIGTERM) by triggering XMLHttpRequest actions in a web browser. This is demonstrated by a multipart/form-data POST to http://localhost:23000 with a "signal SIGTERM" command in a TEXTAREA element. NOTE: The vendor disputes that this is a vulnerability. They state that this is the result of improper configuration of the OpenVPN instance rather than an intrinsic vulnerability, and now more explicitly warn against such configurations in both the management-interface documentation, and with a runtime warning CVE-2013-2692openvpnopenvpn_access_server0.97%12y ago13-05-2014 14:00Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.CVE-2013-2061debianopenvpn+32.81%12y ago15-11-2013 18:16The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher.CVE-2021-4234openvpnopenvpn_access_server0.89%4y ago06-07-2022 19:10OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.CVE-2021-3824openvpnopenvpn_access_server0.75%5y ago23-09-2021 14:53OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.

All vulnerabilities inopenvpn openvpn_access_server

CVE-2006-1629: openvpn

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References