Unscored CVE-2001-0060 EUVD-2001-0060GHSA-cpcw-2gx9-xcwx

Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.

References

20001209 Trustix Security Advisory - stunnel mailing-list
RHSA-2000:129 vendor-advisory
CLA-2000:363 vendor-advisory
stunnel-format-logfile(5807) vdb-entry
DSA-009 vendor-advisory
2128 vdb-entry
20001218 Stunnel format bug mailing-list