James Yonan 4f79d3ec45 Windows security issue: ... Fixed potential local privilege escalation vulnerability in Windows service. The Windows service did not properly quote the executable filename passed to CreateService. A local attacker with write access to the root directory C:\ could create an executable that would be run with the same privilege level as the OpenVPN Windows service. However, since non-Administrative users normally lack write permission on C:\, this vulnerability is generally not exploitable except on older versions of Windows (such as Win2K) where the default permissions on C:\ would allow any user to create files there. Credit: Scott Laurie, MWR InfoSecurity Version 2.1.2 git-svn-id: http://svn.openvpn.net/projects/openvpn/branches/BETA21/openvpn@6400 e7ae566f-a301-0410-adde-c780ea21d3b5		2010-08-15 21:53:00 +00:00
..
.svnignore	Modified .svnignore to only ignore files generated	2008-05-24 19:05:59 +00:00
Makefile.am	Updated copyright date to 2010.	2010-04-28 16:31:36 +00:00
openvpnserv.c	Updated copyright date to 2010.	2010-04-28 16:31:36 +00:00
service.c	Windows security issue:	2010-08-15 21:53:00 +00:00
service.h	Moved branch into official BETA21 position.	2008-05-12 20:31:43 +00:00