6.6

CVE-2013-1762

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Stunnel ≫ Stunnel Version <= 4.54
Stunnel ≫ Stunnel Version4.21
Stunnel ≫ Stunnel Version4.22
Stunnel ≫ Stunnel Version4.23
Stunnel ≫ Stunnel Version4.24
Stunnel ≫ Stunnel Version4.25
Stunnel ≫ Stunnel Version4.26
Stunnel ≫ Stunnel Version4.27
Stunnel ≫ Stunnel Version4.28
Stunnel ≫ Stunnel Version4.29
Stunnel ≫ Stunnel Version4.30
Stunnel ≫ Stunnel Version4.31
Stunnel ≫ Stunnel Version4.32
Stunnel ≫ Stunnel Version4.33
Stunnel ≫ Stunnel Version4.34
Stunnel ≫ Stunnel Version4.35
Stunnel ≫ Stunnel Version4.36
Stunnel ≫ Stunnel Version4.37
Stunnel ≫ Stunnel Version4.38
Stunnel ≫ Stunnel Version4.39
Stunnel ≫ Stunnel Version4.40
Stunnel ≫ Stunnel Version4.41
Stunnel ≫ Stunnel Version4.42
Stunnel ≫ Stunnel Version4.43
Stunnel ≫ Stunnel Version4.44
Stunnel ≫ Stunnel Version4.45
Stunnel ≫ Stunnel Version4.46
Stunnel ≫ Stunnel Version4.47
Stunnel ≫ Stunnel Version4.48
Stunnel ≫ Stunnel Version4.49
Stunnel ≫ Stunnel Version4.50
Stunnel ≫ Stunnel Version4.51
Stunnel ≫ Stunnel Version4.52
Stunnel ≫ Stunnel Version4.53
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.01% 0.821
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.6 4.9 8.5
AV:N/AC:H/Au:N/C:P/I:P/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.