CVE-2005-2531 : 상세 정보

CVE-2005-2531

1.41%V4
2005-08-24
04h00 +00:00
Network
2024-08-07
22h30 +00:00
CVE.org
NVD
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial of service (client disconnection) via a large number of failed authentication attempts.

CVE 정보

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.
EPSS First.org

언급된 제품

구성 0

Openvpn>>Openvpn >> Version 2.0

Openvpn>>Openvpn >> Version 2.0.1_rc1

Openvpn>>Openvpn >> Version 2.0.1_rc2

Openvpn>>Openvpn >> Version 2.0.1_rc3

Openvpn>>Openvpn >> Version 2.0.1_rc4

Openvpn>>Openvpn >> Version 2.0.1_rc5

Openvpn>>Openvpn >> Version 2.0.1_rc6

Openvpn>>Openvpn >> Version 2.0.1_rc7

Openvpn>>Openvpn >> Version 2.0_beta1

Openvpn>>Openvpn >> Version 2.0_beta2

Openvpn>>Openvpn >> Version 2.0_beta3

Openvpn>>Openvpn >> Version 2.0_beta4

Openvpn>>Openvpn >> Version 2.0_beta5

Openvpn>>Openvpn >> Version 2.0_beta6

Openvpn>>Openvpn >> Version 2.0_beta7

Openvpn>>Openvpn >> Version 2.0_beta8

Openvpn>>Openvpn >> Version 2.0_beta9

Openvpn>>Openvpn >> Version 2.0_beta10

Openvpn>>Openvpn >> Version 2.0_beta11

Openvpn>>Openvpn >> Version 2.0_beta12

Openvpn>>Openvpn >> Version 2.0_beta13

Openvpn>>Openvpn >> Version 2.0_beta15

Openvpn>>Openvpn >> Version 2.0_beta16

Openvpn>>Openvpn >> Version 2.0_beta17

Openvpn>>Openvpn >> Version 2.0_beta18

Openvpn>>Openvpn >> Version 2.0_beta19

Openvpn>>Openvpn >> Version 2.0_beta20

Openvpn>>Openvpn >> Version 2.0_beta28

Openvpn>>Openvpn >> Version 2.0_rc1

Openvpn>>Openvpn >> Version 2.0_rc2

Openvpn>>Openvpn >> Version 2.0_rc3

Openvpn>>Openvpn >> Version 2.0_rc4

Openvpn>>Openvpn >> Version 2.0_rc5

Openvpn>>Openvpn >> Version 2.0_rc6

Openvpn>>Openvpn >> Version 2.0_rc7

Openvpn>>Openvpn >> Version 2.0_rc8

Openvpn>>Openvpn >> Version 2.0_rc9

Openvpn>>Openvpn >> Version 2.0_rc10

Openvpn>>Openvpn >> Version 2.0_rc11

Openvpn>>Openvpn >> Version 2.0_rc12

Openvpn>>Openvpn >> Version 2.0_rc13

Openvpn>>Openvpn >> Version 2.0_rc14

Openvpn>>Openvpn >> Version 2.0_rc15

Openvpn>>Openvpn >> Version 2.0_rc16

Openvpn>>Openvpn >> Version 2.0_rc17

Openvpn>>Openvpn >> Version 2.0_rc18

Openvpn>>Openvpn >> Version 2.0_rc19

Openvpn>>Openvpn >> Version 2.0_rc20

Openvpn>>Openvpn >> Version 2.0_rc21

Openvpn>>Openvpn >> Version 2.0_test1

Openvpn>>Openvpn >> Version 2.0_test2

Openvpn>>Openvpn >> Version 2.0_test3

Openvpn>>Openvpn >> Version 2.0_test5

Openvpn>>Openvpn >> Version 2.0_test6

Openvpn>>Openvpn >> Version 2.0_test7

Openvpn>>Openvpn >> Version 2.0_test8

Openvpn>>Openvpn >> Version 2.0_test9

Openvpn>>Openvpn >> Version 2.0_test10

Openvpn>>Openvpn >> Version 2.0_test11

Openvpn>>Openvpn >> Version 2.0_test12

Openvpn>>Openvpn >> Version 2.0_test14

Openvpn>>Openvpn >> Version 2.0_test15

Openvpn>>Openvpn >> Version 2.0_test16

Openvpn>>Openvpn >> Version 2.0_test17

Openvpn>>Openvpn >> Version 2.0_test18

Openvpn>>Openvpn >> Version 2.0_test19

Openvpn>>Openvpn >> Version 2.0_test20

Openvpn>>Openvpn >> Version 2.0_test21

Openvpn>>Openvpn >> Version 2.0_test22

Openvpn>>Openvpn >> Version 2.0_test23

Openvpn>>Openvpn >> Version 2.0_test24

Openvpn>>Openvpn >> Version 2.0_test26

Openvpn>>Openvpn >> Version 2.0_test27

Openvpn>>Openvpn >> Version 2.0_test29

참고 자료

http://www.securityfocus.com/bid/14605
Tags : vdb-entry, x_refsource_BID
http://secunia.com/advisories/17103
Tags : third-party-advisory, x_refsource_SECUNIA
http://openvpn.net/changelog.html
Tags : x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDKSA-2005:145
Tags : vendor-advisory, x_refsource_MANDRIVA
http://www.debian.org/security/2005/dsa-851
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/16463
Tags : third-party-advisory, x_refsource_SECUNIA
CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.