CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-01-31

Last modified

2024-08-08

Affected products

• Secure Linux (Engardelinux)
• Mandrake Linux (Mandrakesoft)
• Linux (Redhat)
• Stunnel (Stunnel)

References

• http://marc.info/?l=stunnel-users&m=100869449828705&w=2
• http://online.securityfocus.com/archive/1/247427
• http://online.securityfocus.com/archive/1/248149
• http://stunnel.mirt.net/news.html
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3
• http://www.redhat.com/support/errata/RHSA-2002-002.html
• http://www.securityfocus.com/bid/3748
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7741