CVE-2002-0002

The connected advisory confirms a format-string vulnerability in stunnel for client-mode negotiations (smtp, pop, nntp). Affected versions: 3.15 through 3.21c; 3.22 is not vulnerable. The flaw arises in the functions that implement client-side SMTP/POP/NNTP negotiations, allowing a malicious serv...