CVE-2008-2420

Published: May 23, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.

Affected (54)

Products: Stunnel: Stunnel

Stunnel

1 product

Stunnel

Configuration A

54 vulnerable

Vulnerable Software	Affected Versions
Stunnel Stunnel	Version 3.10
Stunnel Stunnel	Version 3.11
Stunnel Stunnel	Version 3.12
Stunnel Stunnel	Version 3.13
Stunnel Stunnel	Version 3.14
Stunnel Stunnel	Version 3.15
Stunnel Stunnel	Version 3.16
Stunnel Stunnel	Version 3.17
Stunnel Stunnel	Version 3.18
Stunnel Stunnel	Version 3.19
Stunnel Stunnel	Version 3.20
Stunnel Stunnel	Version 3.21
Stunnel Stunnel	Version 3.21a
Stunnel Stunnel	Version 3.21b
Stunnel Stunnel	Version 3.21c
Stunnel Stunnel	Version 3.22
Stunnel Stunnel	Version 3.23
Stunnel Stunnel	Version 3.24
Stunnel Stunnel	Version 3.25
Stunnel Stunnel	Version 3.26
Stunnel Stunnel	Version 3.4a
Stunnel Stunnel	Version 3.5
Stunnel Stunnel	Version 3.6
Stunnel Stunnel	Version 3.7
Stunnel Stunnel	Version 3.8
Stunnel Stunnel	Version 3.8p1
Stunnel Stunnel	Version 3.8p2
Stunnel Stunnel	Version 3.8p3
Stunnel Stunnel	Version 3.8p4
Stunnel Stunnel	Version 3.9
Stunnel Stunnel	Version 4.00
Stunnel Stunnel	Version 4.01
Stunnel Stunnel	Version 4.02
Stunnel Stunnel	Version 4.03
Stunnel Stunnel	Version 4.04
Stunnel Stunnel	Version 4.05
Stunnel Stunnel	Version 4.06
Stunnel Stunnel	Version 4.07
Stunnel Stunnel	Version 4.08
Stunnel Stunnel	Version 4.09
Stunnel Stunnel	Version 4.10
Stunnel Stunnel	Version 4.11
Stunnel Stunnel	Version 4.12
Stunnel Stunnel	Version 4.13
Stunnel Stunnel	Version 4.14
Stunnel Stunnel	Version 4.15
Stunnel Stunnel	Version 4.16
Stunnel Stunnel	Version 4.17
Stunnel Stunnel	Version 4.18
Stunnel Stunnel	Version 4.19
Stunnel Stunnel	Version 4.20
Stunnel Stunnel	Version 4.21
Stunnel Stunnel	Version 4.22
Stunnel Stunnel	Version 4.23