Description (CNA)
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=stunnel-users&m=100869449828705&w=2
- http://www.securityfocus.com/bid/3748
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3
- http://online.securityfocus.com/archive/1/248149
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7741
- http://stunnel.mirt.net/news.html
- http://www.redhat.com/support/errata/RHSA-2002-002.html
- http://online.securityfocus.com/archive/1/247427
ADP enrichment
No English description supplied.
- http://marc.info/?l=stunnel-users&m=100869449828705&w=2
- http://www.securityfocus.com/bid/3748
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3
- http://online.securityfocus.com/archive/1/248149
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7741
- http://stunnel.mirt.net/news.html
- http://www.redhat.com/support/errata/RHSA-2002-002.html
- http://online.securityfocus.com/archive/1/247427