CVE-2001-0060 Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stunnel | = 3.3 | No fix listed |
| stunnel | = 3.4a | No fix listed |
| stunnel | = 3.7 | No fix listed |
| stunnel | = 3.8 | No fix listed |
References
- 20001209 Trustix Security Advisory - stunnel mailing-list patch vendor-advisory
- CLA-2000:363 vendor-advisory
- DSA-009 vendor-advisory
- RHSA-2000:129 vendor-advisory
- 20001218 Stunnel format bug mailing-list patch vendor-advisory
- 2128 patch vdb-entry vendor-advisory
- stunnel-format-logfile(5807) vdb-entry