CVE-2013-1762: Code Injection
First published: Fri Mar 08 2013(Updated: )
stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Stunnel Stunnel | <=4.54 | |
| Stunnel Stunnel | =4.21 | |
| Stunnel Stunnel | =4.22 | |
| Stunnel Stunnel | =4.23 | |
| Stunnel Stunnel | =4.24 | |
| Stunnel Stunnel | =4.25 | |
| Stunnel Stunnel | =4.26 | |
| Stunnel Stunnel | =4.27 | |
| Stunnel Stunnel | =4.28 | |
| Stunnel Stunnel | =4.29 | |
| Stunnel Stunnel | =4.30 | |
| Stunnel Stunnel | =4.31 | |
| Stunnel Stunnel | =4.32 | |
| Stunnel Stunnel | =4.33 | |
| Stunnel Stunnel | =4.34 | |
| Stunnel Stunnel | =4.35 | |
| Stunnel Stunnel | =4.36 | |
| Stunnel Stunnel | =4.37 | |
| Stunnel Stunnel | =4.38 | |
| Stunnel Stunnel | =4.39 | |
| Stunnel Stunnel | =4.40 | |
| Stunnel Stunnel | =4.41 | |
| Stunnel Stunnel | =4.42 | |
| Stunnel Stunnel | =4.43 | |
| Stunnel Stunnel | =4.44 | |
| Stunnel Stunnel | =4.45 | |
| Stunnel Stunnel | =4.46 | |
| Stunnel Stunnel | =4.47 | |
| Stunnel Stunnel | =4.48 | |
| Stunnel Stunnel | =4.49 | |
| Stunnel Stunnel | =4.50 | |
| Stunnel Stunnel | =4.51 | |
| Stunnel Stunnel | =4.52 | |
| Stunnel Stunnel | =4.53 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/tags
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/stunnel
- canonical/stunnel stunnel
- version/stunnel stunnel/4.54
- version/stunnel stunnel/4.21
- version/stunnel stunnel/4.22
- version/stunnel stunnel/4.23
- version/stunnel stunnel/4.24
- version/stunnel stunnel/4.25
- version/stunnel stunnel/4.26
- version/stunnel stunnel/4.27
- version/stunnel stunnel/4.28
- version/stunnel stunnel/4.29
- version/stunnel stunnel/4.30
- version/stunnel stunnel/4.31
- version/stunnel stunnel/4.32
- version/stunnel stunnel/4.33
- version/stunnel stunnel/4.34
- version/stunnel stunnel/4.35
- version/stunnel stunnel/4.36
- version/stunnel stunnel/4.37
- version/stunnel stunnel/4.38
- version/stunnel stunnel/4.39
- version/stunnel stunnel/4.40
- version/stunnel stunnel/4.41
- version/stunnel stunnel/4.42
- version/stunnel stunnel/4.43
- version/stunnel stunnel/4.44
- version/stunnel stunnel/4.45
- version/stunnel stunnel/4.46
- version/stunnel stunnel/4.47
- version/stunnel stunnel/4.48
- version/stunnel stunnel/4.49
- version/stunnel stunnel/4.50
- version/stunnel stunnel/4.51
- version/stunnel stunnel/4.52
- version/stunnel stunnel/4.53