stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow.
Max CVSS
6.6
EPSS Score
1.11%
Published
2013-03-08
Updated
2014-01-17
1 vulnerabilities found