Re: Stunnel: Format String Bug updateFrom: Roman Drahtmueller (email@example.com)
- Previous message: firstname.lastname@example.org: "[RHSA-2001:176-05] Updated exim packages fix security problem"
- In reply to: Brian Hatch: "Stunnel: Format String Bug update"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 8 Jan 2002 16:52:34 +0100 (MET) From: Roman Drahtmueller <email@example.com> To: firstname.lastname@example.org
> The versions listed in the original advisory were wrong.
> Stunnel versions prior to 3.15 did not contain any smtp
> client negotiation code, only server code which is not
> vulnerable. The buggy smtp, pop, and nntp client code
> wasn't added until version 3.15, not 3.3 as I originally
> Versions prior to 3.15 are not vulnerable. The misdiagnosis
> was caused by an abundance of migranes, illness, and vomitting
> in my household which is luckily starting to abate.
The SuSE Linux distributions 7.2 and 7.3 as well as SLES7 have
stunnel-3.14 (unpatched). It does have protocol-dependent code, but there
are no format string bugs that are exploitable (only "unclean" lines like
fdprintf(local, "220 Go ahead", line); ).
You have to dig into it for a few minutes. The version statement does not
> Update Date: 2-Jan-2002
> Original Release Date: 22-Dec-2001
> Package: stunnel
> Versions: stunnel-3.15 => stunnel-3.21c
> Problem type: format string bugs
-- - - | Roman Drahtmüller <email@example.com> // "You don't need eyes to see, | SuSE GmbH - Security Phone: // you need vision!" | Nürnberg, Germany +49-911-740530 // Maxi Jazz, Faithless | - -