CVSS: 7.5EPSS: 0%CPEs: 25EXPL: 1CVE-2002-0002 – STunnel 3.x - Client Negotiation Protocol Format String
https://notcve.org/view.php?id=CVE-2002-0002
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code. Vulnerabilidad en el formateado de cadenas en stunnel anterior a la 3.22 cuando se usa en modo cliente para smtp, pop o nntp permite que servidores remotos maliciosos ejecuten código arbitrario. • https://www.exploit-db.com/exploits/21192 http://marc.info/?l=stunnel-users&m=100869449828705&w=2 http://online.securityfocus.com/archive/1/247427 http://online.securityfocus.com/archive/1/248149 http://stunnel.mirt.net/news.html http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3 http://www.redhat.com/support/errata/RHSA-2002-002.html http://www.securityfocus.com/bid/3748 https://exchange.xforce.ibmcloud.com/vulnerabilities/7741 •
CVSS: 10.0EPSS: 0%CPEs: 4EXPL: 0CVE-2001-0060
https://notcve.org/view.php?id=CVE-2001-0060
Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username. • http://archives.neohapsis.com/archives/bugtraq/2000-12/0337.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000363 http://www.debian.org/security/2001/dsa-009 http://www.redhat.com/support/errata/RHSA-2000-129.html http://www.securityfocus.com/archive/1/151719 http://www.securityfocus.com/bid/2128 https://exchange.xforce.ibmcloud.com/vulnerabilities/5807 •