CVE-2013-1762 | BDVDB-2026-54891 Detail

Description#

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mandriva.com/security/advisories?name=MDVSA-2013:130
http://rhn.redhat.com/errata/RHSA-2013-0714.html
https://www.stunnel.org/CVE-2013-1762.html
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0097
http://www.debian.org/security/2013/dsa-2664

Exploit#

No public exploit known

History#

Version 12013-03-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.