CVE-2013-1762
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2013-1762
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2013-1762.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2013-1762
- Related
- Published
- 2013-03-08T18:55:01Z
- Modified
- 2024-09-11T02:00:05Z
- Summary
- [none]
- Details
-
stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
- References
-
- http://rhn.redhat.com/errata/RHSA-2013-0714.html
- http://www.debian.org/security/2013/dsa-2664
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:130
- https://www.stunnel.org/CVE-2013-1762.html
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0097
- https://security-tracker.debian.org/tracker/CVE-2013-1762
Affected packages
Debian:11 / stunnel4
Package
- Name
- stunnel4
- Purl
- pkg:deb/debian/stunnel4?arch=source
Debian:12 / stunnel4
Package
- Name
- stunnel4
- Purl
- pkg:deb/debian/stunnel4?arch=source
Debian:13 / stunnel4
Package
- Name
- stunnel4
- Purl
- pkg:deb/debian/stunnel4?arch=source