CVE-2002-0002: High severity Stunnel Stunnel vulnerability
Published Jan 31, 2002
·Updated
Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
Affected Software
25 affected components
Stunnel Stunnel=3.21c
Stunnel Stunnel=3.7
Stunnel Stunnel=3.3
Stunnel Stunnel=3.21b
Stunnel Stunnel=3.14
Stunnel Stunnel=3.4a
Stunnel Stunnel=3.22
Stunnel Stunnel=3.18
Stunnel Stunnel=3.20
Stunnel Stunnel=3.15
Stunnel Stunnel=3.24
Stunnel Stunnel=3.11
Stunnel Stunnel=3.8
Stunnel Stunnel=3.21
Stunnel Stunnel=3.13
Stunnel Stunnel=3.17
Stunnel Stunnel=3.10
Stunnel Stunnel=3.16
Stunnel Stunnel=3.9
Stunnel Stunnel=3.12
Stunnel Stunnel=3.21a
Stunnel Stunnel=3.19
redhat Linux=7.2
Mandrakesoft Mandrake Linux=8.1
Engardelinux Secure Linux=1.0.1
Remediation
Patch Available
Event History
Jan 31, 2002
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0002?
CVE-2002-0002 is classified as a high severity vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2002-0002?
To fix CVE-2002-0002, upgrade stunnel to version 3.22 or later.
3
Which versions of stunnel are affected by CVE-2002-0002?
CVE-2002-0002 affects stunnel versions from 3.0 to 3.21c.
4
Can CVE-2002-0002 affect my email server?
Yes, CVE-2002-0002 can potentially affect email servers using SMTP, POP, or NNTP when stunnel is in client mode.
5
What type of vulnerability is CVE-2002-0002?
CVE-2002-0002 is a format string vulnerability.