CVE-2008-2420: Medium severity stunnel vulnerability

Published May 23, 2008

Updated

The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.

Affected Software

54 affected components

Stunnel Stunnel=4.21

Stunnel Stunnel=4.13

Stunnel Stunnel=4.02

Stunnel Stunnel=4.20

Stunnel Stunnel=4.00

Stunnel Stunnel=3.21c

Stunnel Stunnel=3.7

Stunnel Stunnel=4.07

Stunnel Stunnel=4.09

Stunnel Stunnel=3.8p1

Stunnel Stunnel=3.6

Stunnel Stunnel=4.18

Stunnel Stunnel=4.15

Stunnel Stunnel=3.21b

Stunnel Stunnel=3.14

Stunnel Stunnel=3.4a

Stunnel Stunnel=3.22

Stunnel Stunnel=3.18

Stunnel Stunnel=3.20

Stunnel Stunnel=4.12

Stunnel Stunnel=4.04

Stunnel Stunnel=3.15

Stunnel Stunnel=4.05

Stunnel Stunnel=3.24

Stunnel Stunnel=3.11

Stunnel Stunnel=3.8

Stunnel Stunnel=4.22

Stunnel Stunnel=3.21

Stunnel Stunnel=3.8p4

Stunnel Stunnel=4.14

Stunnel Stunnel=3.13

Stunnel Stunnel=4.16

Stunnel Stunnel=3.23

Stunnel Stunnel=3.17

Stunnel Stunnel=3.5

Stunnel Stunnel=4.19

Stunnel Stunnel=4.10

Stunnel Stunnel=3.8p3

Stunnel Stunnel=3.8p2

Stunnel Stunnel=4.17

Stunnel Stunnel=3.10

Stunnel Stunnel=3.16

Stunnel Stunnel=3.9

Stunnel Stunnel=3.12

Stunnel Stunnel=3.21a

Stunnel Stunnel=4.23

Stunnel Stunnel=4.08

Stunnel Stunnel=3.26

Stunnel Stunnel=4.06

Stunnel Stunnel=3.25

Stunnel Stunnel=4.11

Stunnel Stunnel=4.01

Stunnel Stunnel=4.03

Stunnel Stunnel=3.19

Remediation

Patch Available

http://www.securityfocus.com/bid/29309

Event History

May 23, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2420?

CVE-2008-2420 has a medium severity rating due to its potential to allow attackers to access restricted resources using revoked certificates.

How do I fix CVE-2008-2420?

To fix CVE-2008-2420, upgrade to stunnel version 4.24 or later, which includes a patch for the vulnerability.

What systems are affected by CVE-2008-2420?

CVE-2008-2420 affects stunnel versions 4.21 and earlier, as well as several older versions below 4.24.

What kind of attack does CVE-2008-2420 allow?

CVE-2008-2420 allows remote attackers to bypass access restrictions by exploiting defective handling of revoked certificates.

When was CVE-2008-2420 disclosed?

CVE-2008-2420 was disclosed in May 2008, highlighting a significant flaw in the OCSP functionality of certain stunnel versions.