Lucene search
PRIOn knowledge basePRION:CVE-2013-1762HistoryMar 08, 2013 - 6:55 p.m.
Design/Logic Flaw
2013-03-0818:55:00
PRIOn knowledge base
www.prio-n.com
3
8.3 High
AI Score
Confidence
Low
6.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:P/I:P/A:C
0.011 Low
EPSS
Percentile
84.2%
stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
Related
securityvulns
securityvulns
stunnel integer overflow
2013-05-04 00:00:00
[SECURITY] [DSA 2664-1] stunnel4 security update
2013-05-04 00:00:00
openvas
openvas
CentOS Update for stunnel CESA-2013:0714 centos6
2013-04-15 00:00:00
RedHat Update for stunnel RHSA-2013:0714-01
2013-04-15 00:00:00
Oracle: Security Advisory (ELSA-2013-0714)
2015-10-06 00:00:00
nessus
nessus
RHEL 6 : stunnel (RHSA-2013:0714)
2013-04-09 00:00:00
Debian DSA-2664-1 : stunnel4 - buffer overflow
2013-05-03 00:00:00
SuSE 11.2 Security Update : stunnel (SAT Patch Number 7449)
2013-04-24 00:00:00
cve
cve
CVE-2013-1762
2013-03-08 18:55:00
freebsd
freebsd
stunnel -- Remote Code Execution
2013-03-03 00:00:00
centos
centos
stunnel security update
2013-04-08 20:25:12
gentoo
gentoo
stunnel: Arbitrary code execution
2014-02-06 00:00:00
debiancve
debiancve
CVE-2013-1762
2013-03-08 18:55:00
ubuntucve
ubuntucve
CVE-2013-1762
2013-03-08 00:00:00
debian
debian
[SECURITY] [DSA 2664-1] stunnel4 security update
2013-05-02 17:13:11
redhat
redhat
(RHSA-2013:0714) Moderate: stunnel security update
2013-04-08 00:00:00
oraclelinux
oraclelinux
stunnel security update
2013-04-08 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 08:51:34
8.3 High
AI Score
Confidence
Low
6.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:P/I:P/A:C
0.011 Low
EPSS
Percentile
84.2%
Related for PRION:CVE-2013-1762