CVEvulnerability

CVE-2003-0740

4.6 MEDIUM Published 2003-10-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-10-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.

Affected configurations

• stunnel stunnel 3.3 • stunnel stunnel 3.4a • stunnel stunnel 3.7 • stunnel stunnel 3.8 • stunnel stunnel 3.9 • stunnel stunnel 3.10 • stunnel stunnel 3.11 • stunnel stunnel 3.12 • stunnel stunnel 3.13 • stunnel stunnel 3.14 • stunnel stunnel 3.15 • stunnel stunnel 3.16 • stunnel stunnel 3.17 • stunnel stunnel 3.18 • stunnel stunnel 3.19 • stunnel stunnel 3.20 • stunnel stunnel 3.21 • stunnel stunnel 3.21a • stunnel stunnel 3.21b • stunnel stunnel 3.21c • stunnel stunnel 3.22 • stunnel stunnel 3.24 • stunnel stunnel 4.0

Related

Referenced by CWE · observed example (2)

  • CWE-402 Transmission of Private Resources into a New Sphere weakness
  • CWE-403 Exposure of File Descriptor to Unintended Control Sphere weakness

References