Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2014-0016
Disclosure Date: March 24, 2014 (last updated October 05, 2023)
stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.
0
Attacker Value
Unknown
CVE-2008-2400
Disclosure Date: May 22, 2008 (last updated October 04, 2023)
Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain privileges via unknown attack vectors.
0
Attacker Value
Unknown
CVE-2003-0740
Disclosure Date: October 20, 2003 (last updated February 22, 2025)
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.
0
Attacker Value
Unknown
CVE-2002-0002
Disclosure Date: January 31, 2002 (last updated February 22, 2025)
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
0
Attacker Value
Unknown
CVE-2001-0060
Disclosure Date: February 12, 2001 (last updated February 22, 2025)
Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.
0
