SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

http://online.securityfocus.com/archive/1/247427

http://online.securityfocus.com/archive/1/248149

BID-3748

MDKSA-2002:004

RHSA-2002:002

http://marc.info/?l=stunnel-users&m=100869449828705&w=2

http://marc.theaimsgroup.com/?l=stunnel-users&m=100869449828705&w=2

http://stunnel.mirt.net/news.html

stunnel-client-format-string(7741)


30480



423868



253164



909



197077



282