CVE

Id
4396  
CVE No.
CVE-2002-0002  
Status
Entry  
Description
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21016 4396 CVE-2002-0002 MISC:http://marc.info/?l=stunnel-users&m=100869449828705&w=2  View
21017 4396 CVE-2002-0002 BUGTRAQ:20011227 Stunnel: Format String Bug in versions <3.22  View
21018 4396 CVE-2002-0002 URL:http://online.securityfocus.com/archive/1/247427  View
21019 4396 CVE-2002-0002 BUGTRAQ:20020102 Stunnel: Format String Bug update  View
21020 4396 CVE-2002-0002 URL:http://online.securityfocus.com/archive/1/248149  View
21021 4396 CVE-2002-0002 CONFIRM:http://stunnel.mirt.net/news.html  View
21022 4396 CVE-2002-0002 REDHAT:RHSA-2002:002  View
21023 4396 CVE-2002-0002 URL:http://www.redhat.com/support/errata/RHSA-2002-002.html  View
21024 4396 CVE-2002-0002 MANDRAKE:MDKSA-2002:004  View
21025 4396 CVE-2002-0002 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3  View
21026 4396 CVE-2002-0002 XF:stunnel-client-format-string(7741)  View
21027 4396 CVE-2002-0002 URL:http://xforce.iss.net/xforce/xfdb/7741  View
21028 4396 CVE-2002-0002 BID:3748  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64213 JVNDB-2001-000187 stunnel におけるフォーマットストリングの脆弱性 stunnel において、-n smtp;、;-n pop;、;-n nntp といったオプションを -c と併用して使用した場合に、フォーマット記述子を利用される攻撃の影響を受ける脆弱性が存在します。 CVE-2002-0002 4396 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000187.html  View