OpenVPN Access Server CVE-2017-5868 CRLF Injection Vulnerability
BID:98622
Info
OpenVPN Access Server CVE-2017-5868 CRLF Injection Vulnerability
| Bugtraq ID: | 98622 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-5868 |
| Remote: | Yes |
| Local: | No |
| Published: | May 23 2017 12:00AM |
| Updated: | May 23 2017 12:00AM |
| Credit: | Sydream Labs. |
| Vulnerable: |
OpenVPN Access Server 2.1.4 |
| Not Vulnerable: | |
Discussion
OpenVPN Access Server CVE-2017-5868 CRLF Injection Vulnerability
OpenVPN Access Server is prone to a CRLF-injection vulnerability.
An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks.
OpenVPN Access Server version 2.1.4 is vulnerable.
OpenVPN Access Server is prone to a CRLF-injection vulnerability.
An attacker can exploit this issue to add arbitrary headers to a webpage. This may aid in further attacks.
OpenVPN Access Server version 2.1.4 is vulnerable.
Exploit / POC
OpenVPN Access Server CVE-2017-5868 CRLF Injection Vulnerability
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
OpenVPN Access Server CVE-2017-5868 CRLF Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
OpenVPN Access Server CVE-2017-5868 CRLF Injection Vulnerability
References:
References: