CVE-2013-1762

stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.

Published Bycve@mitre.org

Published DateMar 08, 2013, 18:55

Weakness Type (CWE):CWE-94

CVSS Metrics

Base Score

6.6

Vector String

AV:N/AC:H/Au:N/C:P/I:P/A:C

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

COMPLETE

References

http://rhn.redhat.com/errata/RHSA-2013-0714.html
http://www.debian.org/security/2013/dsa-2664
http://www.mandriva.com/security/advisories?name=MDVSA-2013:130
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0097
https://www.stunnel.org/CVE-2013-1762.html

Weakness Type (CWE):CWE-94

CVSS Metrics

Base Score

6.6

Vector String

AV:N/AC:H/Au:N/C:P/I:P/A:C

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

COMPLETE