PT-2002-1080 · Stunnel · Stunnel

Publicado 2002-01-31 · Atualizado 2017-10-10 · CVE-2002-0002

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions stunnel versions prior to 3.22

Description The issue allows remote malicious servers to execute arbitrary code when stunnel is used in client mode for protocols such as smtp, pop, or nntp. Exploitation of the vulnerabilities can lead to disruption of confidentiality, integrity, and availability of protected information and can be carried out remotely.

Recommendations For versions prior to 3.22, update to version 3.22 or later to resolve the issue. As a temporary workaround, consider restricting the use of stunnel in client mode for smtp, pop, and nntp protocols until a patch is available.

Exploit

Correção

Identificadores relacionados

BDU:2015-08222

CVE-2002-0002

Produtos afetados

Stunnel

Referências · 12

• 🔥 https://exploit-db.com/exploits/21192 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7741 · Nota
• https://rhn.redhat.com/errata/RHSA-2003-221.html · Nota
• http://marc.info/?l=stunnel-users&m=100869449828705&w=2 · Nota
• http://linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2002-002.html · Aviso do Fabricante
• http://stunnel.mirt.net/news.html · Aviso do Fabricante
• http://securityfocus.com/bid/3748 · Nota
• http://online.securityfocus.com/archive/1/248149 · Nota
• http://online.securityfocus.com/archive/1/247427 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0002 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-08222 · Nota de Segurança