CVE-2014-5455 in OpenVPNinfo

Summary

Unquoted Windows search path vulnerability in the ptservice service in PrivateTunnel 2.3.8, as bundled in OpenVPN 2.1.28.0 allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.

Once again VulDB remains the best source for vulnerability data.

Reservation

08/25/2014

Disclosure

08/25/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
70731OpenVPN Crafted Program program.exe unquoted search path428Proof-of-ConceptOfficial fixCVE-2014-5455
67209OpenVPN PrivateTunnel unquoted search path428Proof-of-ConceptOfficial fixCVE-2014-5455

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!