Oh no. Another Linux vulnerability!

Title is misleading - OpenVPN isn't part of Linux.

The article looks like it might be hype to promote a talk at Black Hat in August
 
InvisibleJim said:
Title is misleading - OpenVPN isn't part of Linux.

The article looks like it might be hype to promote a talk at Black Hat in August
Click to expand...
Again with this lol.

How many Windows servers do you think are running OpenVPN Server? vs Linux...

The risk to the companies is going to be much more swayed towards their linux environments.
 
In all seriousness, though, and why I posted the reaction above, like most free software, there are so many eyes on the code, you can be damn sure that the exploit will be fixed in way less time than with proprietary software.

Also, why does this seem like a Windows problem, mostly?
By exploiting a stack overflow in the OpenVPN system service, attackers can crash the NT System service.
Click to expand...
 
r00igev@@r said:
Show me a Windows server capable of being a VPN concentrator. :laugh:
Survivorship bias.:X3:
Click to expand...

OpenVPN 2.x Community How-To: Complete Setup & Configuration Guide

Learn how to set up and configure OpenVPN 2.x with community how-to guides covering certificates, routing, networking, and advanced features.
openvpn.net openvpn.net

Tell them to remove the Windows sections on installation then if nobody is using it...

Setting up OpenVPN Server on Windows 2012 R2 – Life in apps, OSs and code!

blog.bobbyallen.me blog.bobbyallen.me
Also indicates there's a Windows installer for the VPN Server, again, why?

And we stopped calling it a VPN Concentrator in 2004 :)
 
neoprema said:
Tell them to remove the Windows sections on installation then if nobody is using it...
Click to expand...
Some people wear pink underwear but who am I to judge?:p
neoprema said:
And we stopped calling it a VPN Concentrator in 2004 :)
Click to expand...
Is it a Virtual Potato Neoconcentrator? :eek:

Bit rich as the old VPN Server software that Windows has is the one that still supports dial up via phone lines. :ROFL: But the whole point is again being missed. There should be a total abstraction between kernel<->operating system<->application but because devs are so kaksleg there never is and they have an avenue to point the finger elsewhere!
 
dj_jyno said:
In all seriousness, though, and why I posted the reaction above, like most free software, there are so many eyes on the code, you can be damn sure that the exploit will be fixed in way less time than with proprietary software.

Also, why does this seem like a Windows problem, mostly?
Click to expand...
Strictly speaking NT is DEC Vax...
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X