Date: Fri, 19 Aug 2005 09:58:20 +0000 (UTC) From: Remko Lodder <remko@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/security/vuxml vuln.xml Message-ID: <200508190958.j7J9wK7e022228@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
remko 2005-08-19 09:58:20 UTC
FreeBSD ports repository (doc committer)
Modified files:
security/vuxml vuln.xml
Log:
Document four vulnerabilities in openvpn:
* openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server
* openvpn -- denial of service: malicious authenticated "tap" client can deplete server virtual memory
* openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients
* openvpn -- denial of service: client certificate validation can disconnect unrelated clients
Approved by: portsmgr (blanket VuXML)
Submitted by: Matthias Andree <matthias dot andree at gmx dot de>
Revision Changes Path
1.794 +124 -1 ports/security/vuxml/vuln.xml
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200508190958.j7J9wK7e022228>