Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

stunnel stunnel 3.24 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2002-0002
Format string vulnerability in stunnel prior to 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
Stunnel Stunnel 3.14Stunnel Stunnel 3.15Stunnel Stunnel 3.16Stunnel Stunnel 3.21bStunnel Stunnel 3.21cStunnel Stunnel 3.9Stunnel Stunnel 3.12Stunnel Stunnel 3.13Stunnel Stunnel 3.21Stunnel Stunnel 3.21aStunnel Stunnel 3.7Stunnel Stunnel 3.8Stunnel Stunnel 3.17Stunnel Stunnel 3.18Stunnel Stunnel 3.22Stunnel Stunnel 3.24Stunnel Stunnel 3.10Stunnel Stunnel 3.11Stunnel Stunnel 3.19Stunnel Stunnel 3.20Stunnel Stunnel 3.3Stunnel Stunnel 3.4a
7.2
CVSSv2
CVE-2008-2400
Unspecified vulnerability in stunnel prior to 4.23, when running as a service on Windows, allows local users to gain privileges via unknown attack vectors.
Stunnel Stunnel 0.1Stunnel Stunnel 1.6Stunnel Stunnel 2.0Stunnel Stunnel 3.0Stunnel Stunnel 3.15Stunnel Stunnel 3.16Stunnel Stunnel 3.21aStunnel Stunnel 3.21bStunnel Stunnel 3.7Stunnel Stunnel 3.8Stunnel Stunnel 4.01Stunnel Stunnel 4.02Stunnel Stunnel 4.09Stunnel Stunnel 4.10Stunnel Stunnel 4.11Stunnel Stunnel 4.18Stunnel Stunnel 4.19Stunnel Stunnel 1.2Stunnel Stunnel 1.3Stunnel Stunnel 3.11Stunnel Stunnel 3.12Stunnel Stunnel 3.19
6.8
CVSSv2
CVE-2008-2420
The OCSP functionality in stunnel prior to 4.24 does not properly search certificate revocation lists (CRL), which allows remote malicious users to bypass intended access restrictions by using revoked certificates.
Stunnel Stunnel 3.15Stunnel Stunnel 3.16Stunnel Stunnel 3.21cStunnel Stunnel 3.22Stunnel Stunnel 3.6Stunnel Stunnel 3.7Stunnel Stunnel 4.00Stunnel Stunnel 4.01Stunnel Stunnel 4.09Stunnel Stunnel 4.10Stunnel Stunnel 4.17Stunnel Stunnel 4.18Stunnel Stunnel 3.11Stunnel Stunnel 3.12Stunnel Stunnel 3.19Stunnel Stunnel 3.20Stunnel Stunnel 3.21Stunnel Stunnel 3.25Stunnel Stunnel 3.26Stunnel Stunnel 3.8p2Stunnel Stunnel 3.8p3Stunnel Stunnel 4.05
4.6
CVSSv2
CVE-2003-0740
Stunnel 4.00, and 3.24 and previous versions, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.
Stunnel Stunnel 3.10Stunnel Stunnel 3.11Stunnel Stunnel 3.18Stunnel Stunnel 3.19Stunnel Stunnel 3.3Stunnel Stunnel 3.4aStunnel Stunnel 3.16Stunnel Stunnel 3.17Stunnel Stunnel 3.21cStunnel Stunnel 3.22Stunnel Stunnel 3.24Stunnel Stunnel 3.12Stunnel Stunnel 3.13Stunnel Stunnel 3.20Stunnel Stunnel 3.21Stunnel Stunnel 3.7Stunnel Stunnel 3.8Stunnel Stunnel 3.14Stunnel Stunnel 3.15Stunnel Stunnel 3.21aStunnel Stunnel 3.21bStunnel Stunnel 3.9
4.3
CVSSv2
CVE-2014-0016
stunnel prior to 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote malicious users to obtain private ke...
Stunnel Stunnel 4.53Stunnel Stunnel 4.51Stunnel Stunnel 4.46Stunnel Stunnel 4.44Stunnel Stunnel 4.37Stunnel Stunnel 4.35Stunnel Stunnel 4.28Stunnel Stunnel 4.26Stunnel Stunnel 4.21Stunnel Stunnel 4.19Stunnel Stunnel 4.17Stunnel Stunnel 4.12Stunnel Stunnel 4.10Stunnel Stunnel 4.03Stunnel Stunnel 4.01Stunnel Stunnel 3.8p3Stunnel Stunnel 3.8p1Stunnel Stunnel 3.8Stunnel Stunnel 3.6Stunnel Stunnel 3.4aStunnel Stunnel 3.21cStunnel Stunnel 3.21a
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-25525CVE-2024-4652CVE-2024-1438CVE-2024-4671CVE-2024-34351arbitrary CVE-2024-4650SQL injectionoverflow
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook