Back to search
CVE-2008-2420
Published: May 23, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
30425
third-party-advisory
x_refsource_SECUNIA
stunnel-ocsp-security-bypass(42528)
vdb-entry
x_refsource_XF
FEDORA-2008-4606
vendor-advisory
x_refsource_FEDORA
ADV-2008-1569
vdb-entry
x_refsource_VUPEN
30335
third-party-advisory
x_refsource_SECUNIA
31438
third-party-advisory
x_refsource_SECUNIA
FEDORA-2008-4531
vendor-advisory
x_refsource_FEDORA
MDVSA-2008:168
vendor-advisory
x_refsource_MANDRIVA
[stunnel-announce] 20080519 stunnel 4.24 released
mailing-list
x_refsource_MLIST
FEDORA-2008-4579
vendor-advisory
x_refsource_FEDORA
GLSA-200808-08
vendor-advisory
x_refsource_GENTOO
29309
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now