FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server

Affected packages
openvpn < 2.0.1


VuXML ID 5ad3e437-e527-4514-b9ed-280b2ca1a8c9
Discovery 2005-08-03
Entry 2005-08-19

James Yonan reports:

If two or more client machines try to connect to the server at the same time via TCP, using the same client certificate, and when --duplicate-cn is not enabled on the server, a race condition can crash the server with "Assertion failed at mtcp.c:411"


CVE Name CVE-2005-2534