简体中文

CVE-2005-3409：详情

CVE-2005-3409

2.51%V4
2005-11-02
00h00 +00:00
Network
2024-08-07
23h10 +00:00
CVE.org
NVD
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an error status, which leads to a null dereference in an exception handler.

CVE 信息

指标

指标 评分 严重程度 CVSS 向量 来源
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS 是一种预测漏洞被利用可能性的评分模型。

EPSS 评分

EPSS 模型生成一个介于 0 到 1（即 0% 到 100%）之间的概率评分。评分越高，漏洞被利用的可能性越大。

EPSS 百分位

百分位用于根据 EPSS 评分对 CVE 进行排名。例如，EPSS 百分位为第 95 的 CVE，其被利用的可能性高于 95% 的其他 CVE。因此，百分位可用于比较不同 CVE 的 EPSS 评分。
EPSS First.org

相关产品

配置 0

Openvpn>>Openvpn >> Version 2.0

Openvpn>>Openvpn >> Version 2.0.1_rc1

Openvpn>>Openvpn >> Version 2.0.1_rc2

Openvpn>>Openvpn >> Version 2.0.1_rc3

Openvpn>>Openvpn >> Version 2.0.1_rc4

Openvpn>>Openvpn >> Version 2.0.1_rc5

Openvpn>>Openvpn >> Version 2.0.1_rc6

Openvpn>>Openvpn >> Version 2.0.1_rc7

Openvpn>>Openvpn >> Version 2.0.2_rc1

Openvpn>>Openvpn >> Version 2.0.3_rc1

Openvpn>>Openvpn >> Version 2.0_beta1

Openvpn>>Openvpn >> Version 2.0_beta2

Openvpn>>Openvpn >> Version 2.0_beta3

Openvpn>>Openvpn >> Version 2.0_beta4

Openvpn>>Openvpn >> Version 2.0_beta5

Openvpn>>Openvpn >> Version 2.0_beta6

Openvpn>>Openvpn >> Version 2.0_beta7

Openvpn>>Openvpn >> Version 2.0_beta8

Openvpn>>Openvpn >> Version 2.0_beta9

Openvpn>>Openvpn >> Version 2.0_beta10

Openvpn>>Openvpn >> Version 2.0_beta11

Openvpn>>Openvpn >> Version 2.0_beta12

Openvpn>>Openvpn >> Version 2.0_beta13

Openvpn>>Openvpn >> Version 2.0_beta15

Openvpn>>Openvpn >> Version 2.0_beta16

Openvpn>>Openvpn >> Version 2.0_beta17

Openvpn>>Openvpn >> Version 2.0_beta18

Openvpn>>Openvpn >> Version 2.0_beta19

Openvpn>>Openvpn >> Version 2.0_beta20

Openvpn>>Openvpn >> Version 2.0_beta28

Openvpn>>Openvpn >> Version 2.0_rc1

Openvpn>>Openvpn >> Version 2.0_rc2

Openvpn>>Openvpn >> Version 2.0_rc3

Openvpn>>Openvpn >> Version 2.0_rc4

Openvpn>>Openvpn >> Version 2.0_rc5

Openvpn>>Openvpn >> Version 2.0_rc6

Openvpn>>Openvpn >> Version 2.0_rc7

Openvpn>>Openvpn >> Version 2.0_rc8

Openvpn>>Openvpn >> Version 2.0_rc9

Openvpn>>Openvpn >> Version 2.0_rc10

Openvpn>>Openvpn >> Version 2.0_rc11

Openvpn>>Openvpn >> Version 2.0_rc12

Openvpn>>Openvpn >> Version 2.0_rc13

Openvpn>>Openvpn >> Version 2.0_rc14

Openvpn>>Openvpn >> Version 2.0_rc15

Openvpn>>Openvpn >> Version 2.0_rc16

Openvpn>>Openvpn >> Version 2.0_rc17

Openvpn>>Openvpn >> Version 2.0_rc18

Openvpn>>Openvpn >> Version 2.0_rc19

Openvpn>>Openvpn >> Version 2.0_rc20

Openvpn>>Openvpn >> Version 2.0_rc21

Openvpn>>Openvpn >> Version 2.0_test1

Openvpn>>Openvpn >> Version 2.0_test2

Openvpn>>Openvpn >> Version 2.0_test3

Openvpn>>Openvpn >> Version 2.0_test5

Openvpn>>Openvpn >> Version 2.0_test6

Openvpn>>Openvpn >> Version 2.0_test7

Openvpn>>Openvpn >> Version 2.0_test8

Openvpn>>Openvpn >> Version 2.0_test9

Openvpn>>Openvpn >> Version 2.0_test10

Openvpn>>Openvpn >> Version 2.0_test11

Openvpn>>Openvpn >> Version 2.0_test12

Openvpn>>Openvpn >> Version 2.0_test14

Openvpn>>Openvpn >> Version 2.0_test15

Openvpn>>Openvpn >> Version 2.0_test16

Openvpn>>Openvpn >> Version 2.0_test17

Openvpn>>Openvpn >> Version 2.0_test18

Openvpn>>Openvpn >> Version 2.0_test19

Openvpn>>Openvpn >> Version 2.0_test20

Openvpn>>Openvpn >> Version 2.0_test21

Openvpn>>Openvpn >> Version 2.0_test22

Openvpn>>Openvpn >> Version 2.0_test23

Openvpn>>Openvpn >> Version 2.0_test24

Openvpn>>Openvpn >> Version 2.0_test26

Openvpn>>Openvpn >> Version 2.0_test27

Openvpn>>Openvpn >> Version 2.0_test29

Openvpn>>Openvpn_access_server >> Version 2.0.1

Openvpn>>Openvpn_access_server >> Version 2.0.2

参考资料

http://secunia.com/advisories/17447
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/17480
Tags : third-party-advisory, x_refsource_SECUNIA
http://openvpn.net/changelog.html
Tags : x_refsource_CONFIRM
http://www.gentoo.org/security/en/glsa/glsa-200511-07.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://www.securityfocus.com/bid/15270
Tags : vdb-entry, x_refsource_BID
http://www.securityfocus.com/archive/1/415487
Tags : vendor-advisory, x_refsource_OPENPKG
http://secunia.com/advisories/17452
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.osvdb.org/20416
Tags : vdb-entry, x_refsource_OSVDB
http://www.debian.org/security/2005/dsa-885
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/17376
Tags : third-party-advisory, x_refsource_SECUNIA
cvefind.com 上展示的信息来源于多个精心选择的权威数据源。CVE 数据由 MITRE Corporation 和 National Vulnerability Database (NVD) 提供。已知被利用漏洞（KEV）目录来源于 Cybersecurity and Infrastructure Security Agency (CISA)，EPSS 评分来自 FIRST.org。此外，软件弱点（CWE）和常见攻击模式（CAPEC）数据由 MITRE Corporation 维护，硬件和软件配置（CPE）信息由 NVD 提供。