Professional OVAL Repository

Id oval:org.mitre.oval:def:21174

Version 16

Class patch

ALTXid 37315

Language English

Severity NotAvailable

Title RHSA-2013:0714: stunnel security update (Moderate) Description stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.

Platform Red Hat Enterprise Linux 6 CentOS Linux 6

Product stunnel

• Status: ACCEPTED
  Status: ACCEPTED
  
  

  • 2014-01-09T13:03:25 : submitted
    • ALTX-SOFT Sergey Artykhov
  • 2014-01-10T12:56:59.583-05:00 : status_change DRAFT
  • 2014-01-27T04:01:13.347-05:00 : status_change INTERIM
  • 2014-02-17T04:01:27.705-05:00 : status_change ACCEPTED

• VENDOR: RHSA-2013:0714-01
  VENDOR: RHSA-2013:0714-01

  Id: RHSA-2013:0714-01

  Reference: https://rhn.redhat.com/errata/RHSA-2013-0714.html

• CESA: CESA-2013:0714
  CESA: CESA-2013:0714

  Id: CESA-2013:0714

• CVE: CVE-2013-1762
  CVE: CVE-2013-1762
  Id: CVE-2013-1762

  Reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1762

  
  

  Comment : stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.

  
  

  CVSSv2 Score: 6.6

  Access vector:	COMPLETE
  Access complexity:	HIGH
  Authentication:	NONE
  Confidentiality impact:	PARTIAL
  Integrity impact:	PARTIAL
  Availability impact:	COMPLETE

  
  CVSSv2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:C
  

  
  
  

  CWE: 94 (Improper Control of Generation of Code ('Code Injection'))

  
  References:

  • RHSA-2013:0714 (REDHAT)
  • DSA-2664 (DEBIAN)
  • MDVSA-2013:130 (MANDRIVA)
  • https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0097 (CONFIRM)
  • https://www.stunnel.org/CVE-2013-1762.html (CONFIRM)

Expand All

Collapse All