Lucene search
HistoryMay 14, 2015 - 12:59 a.m.
CVE-2015-3644
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.
Affected configurations
Node
stunnelstunnelMatch5.00
ORstunnelstunnelMatch5.01
ORstunnelstunnelMatch5.02
ORstunnelstunnelMatch5.03
ORstunnelstunnelMatch5.04
ORstunnelstunnelMatch5.05
ORstunnelstunnelMatch5.06
ORstunnelstunnelMatch5.07
ORstunnelstunnelMatch5.08
ORstunnelstunnelMatch5.09
ORstunnelstunnelMatch5.10
ORstunnelstunnelMatch5.11
ORstunnelstunnelMatch5.12
ORstunnelstunnelMatch5.13
Related
nessus
nessus
SUSE SLES12 Security Update : stunnel (SUSE-SU-2015:1062-1)
2015-06-16 00:00:00
stunnel < 5.14 Authentication Bypass Vulnerability
2015-05-20 00:00:00
Debian DSA-3299-1 : stunnel4 - security update
2015-07-06 00:00:00
securityvulns
securityvulns
stunnel authentication bypass
2015-07-14 00:00:00
[SECURITY] [DSA 3299-1] stunnel4 security update
2015-07-14 00:00:00
debian
debian
[SECURITY] [DSA 3299-1] stunnel4 security update
2015-07-02 15:48:19
[SECURITY] [DSA 3299-1] stunnel4 security update
2015-07-02 15:48:19
openvas
openvas
Debian Security Advisory DSA 3299-1 (stunnel4 - security update)
2015-07-02 00:00:00
Debian: Security Advisory (DSA-3299-1)
2015-07-01 00:00:00
Mageia: Security Advisory (MGASA-2015-0289)
2015-10-15 00:00:00
ubuntucve
ubuntucve
CVE-2015-3644
2015-05-14 00:00:00
debiancve
debiancve
CVE-2015-3644
2015-05-14 00:59:06
cve
cve
CVE-2015-3644
2015-05-14 00:59:06
mageia
mageia
Updated stunnel package fixes security vulnerability
2015-07-27 20:45:18
prion
prion
Authentication flaw
2015-05-14 00:59:00
cvelist
cvelist
CVE-2015-3644
2015-05-14 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.0%
Related for NVD:CVE-2015-3644