OpenVPN version 2.0.x contain a remotely exploitable format string bug in the processing of its command-line and configuration arguments.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41092/openVPN20x.txt
Source: https://packetstormsecurity.com/files/41092/openVPN20x.txt.html