CVE-2015-3644
14.05.2015, 00:59
Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.Enginsight
| Vendor | Product | Version |
|---|---|---|
| stunnel | stunnel | 5.00 |
| stunnel | stunnel | 5.01 |
| stunnel | stunnel | 5.02 |
| stunnel | stunnel | 5.03 |
| stunnel | stunnel | 5.04 |
| stunnel | stunnel | 5.05 |
| stunnel | stunnel | 5.06 |
| stunnel | stunnel | 5.07 |
| stunnel | stunnel | 5.08 |
| stunnel | stunnel | 5.09 |
| stunnel | stunnel | 5.10 |
| stunnel | stunnel | 5.11 |
| stunnel | stunnel | 5.12 |
| stunnel | stunnel | 5.13 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References