Hi,

In my understanding it only removes abilities  to set remotely the route 
*software* (/sbin/route , whatever).
Something that: 
- I can't find a case why you may want to do such thing.
- Is an undocumented feature.

I haven't tested it but from quickly reading the code you still can
remotely change route after applying the patch.

Didier

-- 
[CVE-2008-3459] OpenVPN vulnerability allows arbitrary command execution via 
crafted configuration
https://bugs.launchpad.net/bugs/256621
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to