Lucene search
HistoryMay 14, 2015 - 12:59 a.m.
CVE-2015-3644
stunnel
cve-2015-3644
authentication bypass
remote attack
6.5 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.004 Low
EPSS
Percentile
73.7%
Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.
Related
securityvulns
securityvulns
stunnel authentication bypass
2015-07-14 00:00:00
[SECURITY] [DSA 3299-1] stunnel4 security update
2015-07-14 00:00:00
nessus
nessus
SUSE SLES12 Security Update : stunnel (SUSE-SU-2015:1062-1)
2015-06-16 00:00:00
Debian DSA-3299-1 : stunnel4 - security update
2015-07-06 00:00:00
stunnel < 5.14 Authentication Bypass Vulnerability
2015-05-20 00:00:00
debian
debian
[SECURITY] [DSA 3299-1] stunnel4 security update
2015-07-02 15:48:19
[SECURITY] [DSA 3299-1] stunnel4 security update
2015-07-02 15:48:37
ubuntucve
ubuntucve
CVE-2015-3644
2015-05-14 00:00:00
debiancve
debiancve
CVE-2015-3644
2015-05-14 00:59:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:1062-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2015-0289)
2015-10-15 00:00:00
Debian Security Advisory DSA 3299-1 (stunnel4 - security update)
2015-07-02 00:00:00
prion
prion
Authentication flaw
2015-05-14 00:59:00
mageia
mageia
Updated stunnel package fixes security vulnerability
2015-07-27 20:45:18
6.5 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2015-3644