Lucene search
MitreCVE-2006-2229HistoryMay 05, 2006 - 7:02 p.m.
CVE-2006-2229
2006-05-0519:02:00
mitre
web.nvd.nist.gov
27
openvpn
2.0.7
cve-2006-2229
cleartext password
vulnerability
ip configuration
management interface
denial of service
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:N/A:P
AI Score
6.8
Confidence
High
EPSS
0.016
Percentile
87.4%
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
Affected configurations
Node
openvpnopenvpnMatch2.0
ORopenvpnopenvpnMatch2.0.1_rc1
ORopenvpnopenvpnMatch2.0.1_rc2
ORopenvpnopenvpnMatch2.0.1_rc3
ORopenvpnopenvpnMatch2.0.1_rc4
ORopenvpnopenvpnMatch2.0.1_rc5
ORopenvpnopenvpnMatch2.0.1_rc6
ORopenvpnopenvpnMatch2.0.1_rc7
ORopenvpnopenvpnMatch2.0.2_rc1
ORopenvpnopenvpnMatch2.0.3_rc1
ORopenvpnopenvpnMatch2.0.4
ORopenvpnopenvpnMatch2.0.6_rc1
ORopenvpnopenvpnMatch2.0_beta1
ORopenvpnopenvpnMatch2.0_beta2
ORopenvpnopenvpnMatch2.0_beta3
ORopenvpnopenvpnMatch2.0_beta4
ORopenvpnopenvpnMatch2.0_beta5
ORopenvpnopenvpnMatch2.0_beta6
ORopenvpnopenvpnMatch2.0_beta7
ORopenvpnopenvpnMatch2.0_beta8
ORopenvpnopenvpnMatch2.0_beta9
ORopenvpnopenvpnMatch2.0_beta10
ORopenvpnopenvpnMatch2.0_beta11
ORopenvpnopenvpnMatch2.0_beta12
ORopenvpnopenvpnMatch2.0_beta13
ORopenvpnopenvpnMatch2.0_beta15
ORopenvpnopenvpnMatch2.0_beta16
ORopenvpnopenvpnMatch2.0_beta17
ORopenvpnopenvpnMatch2.0_beta18
ORopenvpnopenvpnMatch2.0_beta19
ORopenvpnopenvpnMatch2.0_beta20
ORopenvpnopenvpnMatch2.0_beta28
ORopenvpnopenvpnMatch2.0_rc1
ORopenvpnopenvpnMatch2.0_rc2
ORopenvpnopenvpnMatch2.0_rc3
ORopenvpnopenvpnMatch2.0_rc4
ORopenvpnopenvpnMatch2.0_rc5
ORopenvpnopenvpnMatch2.0_rc6
ORopenvpnopenvpnMatch2.0_rc7
ORopenvpnopenvpnMatch2.0_rc8
ORopenvpnopenvpnMatch2.0_rc9
ORopenvpnopenvpnMatch2.0_rc10
ORopenvpnopenvpnMatch2.0_rc11
ORopenvpnopenvpnMatch2.0_rc12
ORopenvpnopenvpnMatch2.0_rc13
ORopenvpnopenvpnMatch2.0_rc14
ORopenvpnopenvpnMatch2.0_rc15
ORopenvpnopenvpnMatch2.0_rc16
ORopenvpnopenvpnMatch2.0_rc17
ORopenvpnopenvpnMatch2.0_rc18
ORopenvpnopenvpnMatch2.0_rc19
ORopenvpnopenvpnMatch2.0_rc20
ORopenvpnopenvpnMatch2.0_rc21
ORopenvpnopenvpnMatch2.0_test1
ORopenvpnopenvpnMatch2.0_test2
ORopenvpnopenvpnMatch2.0_test3
ORopenvpnopenvpnMatch2.0_test4
ORopenvpnopenvpnMatch2.0_test5
ORopenvpnopenvpnMatch2.0_test6
ORopenvpnopenvpnMatch2.0_test7
ORopenvpnopenvpnMatch2.0_test8
ORopenvpnopenvpnMatch2.0_test9
ORopenvpnopenvpnMatch2.0_test10
ORopenvpnopenvpnMatch2.0_test11
ORopenvpnopenvpnMatch2.0_test12
ORopenvpnopenvpnMatch2.0_test14
ORopenvpnopenvpnMatch2.0_test15
ORopenvpnopenvpnMatch2.0_test16
ORopenvpnopenvpnMatch2.0_test17
ORopenvpnopenvpnMatch2.0_test18
ORopenvpnopenvpnMatch2.0_test19
ORopenvpnopenvpnMatch2.0_test20
ORopenvpnopenvpnMatch2.0_test21
ORopenvpnopenvpnMatch2.0_test22
ORopenvpnopenvpnMatch2.0_test23
ORopenvpnopenvpnMatch2.0_test24
ORopenvpnopenvpnMatch2.0_test25
ORopenvpnopenvpnMatch2.0_test26
ORopenvpnopenvpnMatch2.0_test27
ORopenvpnopenvpnMatch2.0_test29
ORopenvpnopenvpn_access_serverMatch2.0.1
ORopenvpnopenvpn_access_serverMatch2.0.2
ORopenvpnopenvpn_access_serverMatch2.0.5
ORopenvpnopenvpn_access_serverMatch2.0.6
ORopenvpnopenvpn_access_serverMatch2.0.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| openvpn | openvpn | 2.0 | cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc1 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc2 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc3 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc4 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc5 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc6 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.1_rc7 | cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.2_rc1 | cpe:2.3:a:openvpn:openvpn:2.0.2_rc1:*:*:*:*:*:*:* |
| openvpn | openvpn | 2.0.3_rc1 | cpe:2.3:a:openvpn:openvpn:2.0.3_rc1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-2229
2006-05-05 19:00:00
prion
prion
Design/Logic Flaw
2006-05-05 19:02:00
nvd
nvd
CVE-2006-2229
2006-05-05 19:02:00
debiancve
debiancve
CVE-2006-2229
2006-05-05 19:02:00
nessus
nessus
OpenVPN Unprotected Management Interface
2006-05-08 00:00:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:N/A:P
AI Score
6.8
Confidence
High
EPSS
0.016
Percentile
87.4%
Related for CVE-2006-2229