7.5

CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Data is provided by the National Vulnerability Database (NVD)
Stunnel ≫ Stunnel Version3.3
Stunnel ≫ Stunnel Version3.4a
Stunnel ≫ Stunnel Version3.7
Stunnel ≫ Stunnel Version3.8
Stunnel ≫ Stunnel Version3.9
Stunnel ≫ Stunnel Version3.10
Stunnel ≫ Stunnel Version3.11
Stunnel ≫ Stunnel Version3.12
Stunnel ≫ Stunnel Version3.13
Stunnel ≫ Stunnel Version3.14
Stunnel ≫ Stunnel Version3.15
Stunnel ≫ Stunnel Version3.16
Stunnel ≫ Stunnel Version3.17
Stunnel ≫ Stunnel Version3.18
Stunnel ≫ Stunnel Version3.19
Stunnel ≫ Stunnel Version3.20
Stunnel ≫ Stunnel Version3.21
Stunnel ≫ Stunnel Version3.21a
Stunnel ≫ Stunnel Version3.21b
Stunnel ≫ Stunnel Version3.21c
Stunnel ≫ Stunnel Version3.22
Stunnel ≫ Stunnel Version3.24
Engardelinux ≫ Secure Linux Version1.0.1
Mandrakesoft ≫ Mandrake Linux Version8.1
Redhat ≫ Linux Version7.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 14.92% 0.94
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P