CVE-2003-0740
Fixed in a distro release EPSS <1%
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.
Products: stunnel
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | stunnel4 | 2:4.04 |
| Debian 13 | stunnel4 | 2:4.04 |
| Debian 14 | stunnel | 2:3.26 |