CVE-2008-2400: High severity stunnel vulnerability
Published May 22, 2008
·Updated
Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain privileges via unknown attack vectors.
Affected Software
71 affected components
Stunnel Stunnel=0.1
Stunnel Stunnel=1.0
Stunnel Stunnel=1.1
Stunnel Stunnel=1.2
Stunnel Stunnel=1.3
Stunnel Stunnel=1.4
Stunnel Stunnel=1.5
Stunnel Stunnel=1.6
Stunnel Stunnel=2.0
Stunnel Stunnel=2.1
Stunnel Stunnel=3.0
Stunnel Stunnel=3.0-b1
Stunnel Stunnel=3.0-b2
Stunnel Stunnel=3.0-b3
Stunnel Stunnel=3.0-b4
Stunnel Stunnel=3.0-b5
Stunnel Stunnel=3.0-b6
Stunnel Stunnel=3.0-b7
Stunnel Stunnel=3.1
Stunnel Stunnel=3.2
Stunnel Stunnel=3.3
Stunnel Stunnel=3.4a
Stunnel Stunnel=3.5
Stunnel Stunnel=3.6
Stunnel Stunnel=3.7
Stunnel Stunnel=3.8
Stunnel Stunnel=3.8-p1
Stunnel Stunnel=3.8-p2
Stunnel Stunnel=3.8-p3
Stunnel Stunnel=3.8-p4
Stunnel Stunnel=3.9
Stunnel Stunnel=3.10
Stunnel Stunnel=3.11
Stunnel Stunnel=3.12
Stunnel Stunnel=3.13
Stunnel Stunnel=3.14
Stunnel Stunnel=3.15
Stunnel Stunnel=3.16
Stunnel Stunnel=3.17
Stunnel Stunnel=3.18
Stunnel Stunnel=3.19
Stunnel Stunnel=3.20
Stunnel Stunnel=3.21
Stunnel Stunnel=3.21a
Stunnel Stunnel=3.21b
Stunnel Stunnel=3.21c
Stunnel Stunnel=3.22
Stunnel Stunnel=3.24
Stunnel Stunnel=4.0
Stunnel Stunnel=4.01
Stunnel Stunnel=4.02
Stunnel Stunnel=4.03
Stunnel Stunnel=4.04
Stunnel Stunnel=4.05
Stunnel Stunnel=4.06
Stunnel Stunnel=4.07
Stunnel Stunnel=4.08
Stunnel Stunnel=4.09
Stunnel Stunnel=4.10
Stunnel Stunnel=4.11
Stunnel Stunnel=4.12
Stunnel Stunnel=4.13
Stunnel Stunnel=4.14
Stunnel Stunnel=4.15
Stunnel Stunnel=4.16
Stunnel Stunnel=4.17
Stunnel Stunnel=4.18
Stunnel Stunnel=4.19
Stunnel Stunnel=4.20
Stunnel Stunnel=4.21
Stunnel Stunnel=4.22
Event History
May 22, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2400?
The severity of CVE-2008-2400 is considered medium due to the potential for local privilege escalation for users running stunnel before version 4.23.
2
How do I fix CVE-2008-2400?
To fix CVE-2008-2400, upgrade stunnel to version 4.23 or later.
3
Who is affected by CVE-2008-2400?
CVE-2008-2400 affects local users of stunnel versions prior to 4.23 running as a service on Windows.
4
What types of attacks are possible with CVE-2008-2400?
The specific attack vectors for CVE-2008-2400 remain unspecified, allowing local users to gain privileges in an unknown manner.
5
What software versions are affected by CVE-2008-2400?
CVE-2008-2400 affects stunnel versions from 0.1 up to but not including 4.23.