Home A - Z
Page Index

An Otter Wiki

CVE-2023-7235: OpenVPN 2.x GUI Privilege Escalation Possible if Installed Outside Default Installation Path on Windows

When OpenVPN 2 GUI is installed on Windows in a non-standard installation directory, the installation directory's access control is not properly restricted. Windows, by default, assigns very open permissions, making any directory outside of standard system paths writable to anyone. This vulnerability allows an attacker to replace the OpenVPN service component with malicious code, gaining increased control over the host when the OpenVPN service process is restarted.

References

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9