high7.5Public exploit code
CVE-2002-0002
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- STunnel 3.x - Client Negotiation Protocol Format String2001-12-22 · remote · linux · Verified
Impact
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stunnel | Stunnel | Versions 3.3, 3.4a, 3.7, 3.8, 3.9, 3.10 |
| Engardelinux | Secure Linux | Version 1.0.1 |
| Mandrakesoft | Mandrake Linux | Version 8.1 |
| Redhat | Linux | Version 7.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=stunnel-users&m=100869449828705&w=2
- http://online.securityfocus.com/archive/1/247427
- http://online.securityfocus.com/archive/1/248149
- http://stunnel.mirt.net/news.html
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3
- http://www.redhat.com/support/errata/RHSA-2002-002.html
- http://www.securityfocus.com/bid/3748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7741
- http://marc.info/?l=stunnel-users&m=100869449828705&w=2
- http://online.securityfocus.com/archive/1/247427
- http://online.securityfocus.com/archive/1/248149
- http://stunnel.mirt.net/news.html
- http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3
- http://www.redhat.com/support/errata/RHSA-2002-002.html
- http://www.securityfocus.com/bid/3748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7741