[security-alerts] FW: [SA22232] OpenVPN Multiple Vulnerabilities

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> OpenVPN Multiple Vulnerabilities
> 
> SECUNIA ADVISORY ID:
> SA22232
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/22232/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> DoS, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> OpenVPN 2.x
> http://secunia.com/product/5568/
> 
> DESCRIPTION:
> Some vulnerabilities have been reported in OpenVPN, which can be
> exploited by malicious people to cause a DoS (Denial of Service) or
> potentially compromise a vulnerable system.
> 
> The OpenVPN Windows Installer prior to 2.0.9 includes vulnerable
> versions of the OpenSSL DLL files.
> 
> For more information:
> SA22130
> 
> SOLUTION:
> Update to version 2.0.9.
> 
> PROVIDED AND/OR DISCOVERED BY:
> Reported by the vendor.
> 
> ORIGINAL ADVISORY:
> http://openvpn.net/changelog.html
> 
> OTHER REFERENCES:
> SA21846:
> http://secunia.com/advisories/21846/
>