CVE-2006-1629
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client...
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
Exploit likelihood
What each source reports
NVD Score used
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
- Record
CVE-2006-1629- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
- Record
CVE-2006-1629- Updated
- 2026-11-02
EUVDEUVD-2006-1630 No score
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
- Record
EUVD-2006-1630- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8fqr-f734-rf7m No score
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client...
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
- Record
GHSA-8fqr-f734-rf7m- Updated
- 2026-11-02
OSV No score
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
- Record
CVE-2006-1629- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1629 No score
OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
- Record
DEBIAN-CVE-2006-1629- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11128-1 No score
openvpn-2.5.3-1.2 on GA media
These are all security issues fixed in the openvpn-2.5.3-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11128-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvpnDebian:12 |
before 2.0.6-1 | 2.0.6-1 |
openvpnDebian:13 |
before 2.0.6-1 | 2.0.6-1 |
openvpnDebian:14 |
before 2.0.6-1 | 2.0.6-1 |
openvpnDebian:3.1 |
before 2.0-1sarge3, plus listed versions 2.0-12.0-1sarge12.0-1sarge2 |
2.0-1sarge3 |
openvpnopenSUSE:Tumbleweed From an advisory covering 10 CVEs |
before 2.5.3-1.2 | 2.5.3-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1629 is a high vulnerability (CVSS 9.0) in Openvpn, published April 6, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.09%, the 87th percentile. Fixed in openvpn 2.0.6-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/25667
mandriva.com/security/advisories?name=MDKSA-2006:069
vupen.com/english/advisories/2006/1261
securityfocus.com/bid/17392
openvpn.net/changelog.html
osreviews.net/reviews/security/openvpn-print
Show 21 moreShow less
secunia.com/advisories/19531
debian.org/security/2006/dsa-1045
sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482
osvdb.org/24444
novell.com/linux/security/advisories/2006_04_28.html
nvd.nist.gov/vuln/detail/CVE-2006-1629
github.com/advisories/GHSA-8fqr-f734-rf7m
security-tracker.debian.org/tracker/CVE-2006-1629
suse.com/security/cve/CVE-2005-3393