CVE-2015-3644

Published: May 14, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.

Affected (14)

Products: Stunnel: Stunnel

Stunnel

1 product

Stunnel

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Stunnel Stunnel	Version 5.00
Stunnel Stunnel	Version 5.01
Stunnel Stunnel	Version 5.02
Stunnel Stunnel	Version 5.03
Stunnel Stunnel	Version 5.04
Stunnel Stunnel	Version 5.05
Stunnel Stunnel	Version 5.06
Stunnel Stunnel	Version 5.07
Stunnel Stunnel	Version 5.08
Stunnel Stunnel	Version 5.09
Stunnel Stunnel	Version 5.10
Stunnel Stunnel	Version 5.11
Stunnel Stunnel	Version 5.12
Stunnel Stunnel	Version 5.13