CVE-2011-2940

概要

参考情報

• secunia.com/advisories/45705 · Vendor Advisory
• securitytracker.com/id
• stunnel.org
• openwall.com/lists/oss-security/2011/08/19/18
• openwall.com/lists/oss-security/2011/08/19/6
• osvdb.org/74600
• securityfocus.com/bid/49254
• stunnel.org/pipermail/stunnel-announce/2011-August/000059.html
• bugzilla.redhat.com/show_bug.cgi
• exchange.xforce.ibmcloud.com/vulnerabilities/69318

stunnel のその他の脆弱性

• CVE-2021-20230高 7.5A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and ve…
• CVE-2015-3644中 5.8Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial con…
• CVE-2014-0016中 4.3stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), whi…
• CVE-2013-1762中 6.6stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer convers…
• CVE-2008-2420中 6.8The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to …