CVE-2006-1629: Openvpn

High severity, CVSS 9.0. EPSS: 3.1% chance of exploitation in the next 30 days.

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Affected products

• Openvpn Openvpn: version 2.0 only; version 2.0.4 only
• Openvpn Openvpn Access Server: version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.5 only

Published 2006-04-06. Last modified 2026-06-16.