CVE-2003-0740

Published: Oct 20, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.

Affected (23)

Products: Stunnel: Stunnel

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Stunnel Stunnel	Version 3.10
Stunnel Stunnel	Version 3.11
Stunnel Stunnel	Version 3.12
Stunnel Stunnel	Version 3.13
Stunnel Stunnel	Version 3.14
Stunnel Stunnel	Version 3.15
Stunnel Stunnel	Version 3.16
Stunnel Stunnel	Version 3.17
Stunnel Stunnel	Version 3.18
Stunnel Stunnel	Version 3.19
Stunnel Stunnel	Version 3.20
Stunnel Stunnel	Version 3.21
Stunnel Stunnel	Version 3.21a
Stunnel Stunnel	Version 3.21b
Stunnel Stunnel	Version 3.21c
Stunnel Stunnel	Version 3.22
Stunnel Stunnel	Version 3.24
Stunnel Stunnel	Version 3.3
Stunnel Stunnel	Version 3.4a
Stunnel Stunnel	Version 3.7
Stunnel Stunnel	Version 3.8
Stunnel Stunnel	Version 3.9
Stunnel Stunnel	Version 4.0

References (8)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=106260760211958&w=2

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2003:108

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-297.html

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000736

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=106260760211958&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2003:108

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-297.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.