NetSight
IP …
medium4.6Public exploit code

CVE-2003-0740

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.

Affected products

VendorProductAffected versions
StunnelStunnel
Versions 3.3, 3.4a, 3.7, 3.8, 3.9, 3.10

References