CVE-2014-5455 Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a c...
MediumCVSS 6.9
EPSS 0.95%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenVPN | = 2.1.28.0 | No fix listed |
| privatetunnel | = 2.3.8 | No fix listed |
References
- 109007 broken-link vdb-entry
- packetstormsecurity.com exploit
- 34037 exploit
- www.zeroscience.mk exploit
- github.com
- github.com
- HPSBGN3551 third-party-advisory vendor-advisory