The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.

A vulnerability was found in the OCSP search functionality in stunnel that could allow a remote attacker to use a revoked certificate that would be successfully authenticated by stunnel (CVE-2008-2420). This flaw only concerns users who have enabled OCSP validation in stunnel.

The updated packages have been patched to correct this issue.

The remote host is affected by the vulnerability described in GLSA-200808-08 (stunnel: Security bypass)

    An unspecified bug in the OCSP search functionality of stunnel has been     discovered.
  Impact :

    A remote attacker can use a revoked certificate that would be     successfully authenticated by stunnel. This issue only concerns the     users who have enabled the OCSP validation in stunnel.
  Workaround :

    There is no known workaround at this time.

New upstream release 4.24 fixing security issue in certificate verification via OCSP protocol:
http://stunnel.mirt.net/pipermail/stunnel- announce/2008-May/000035.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
38063	Mandriva Linux Security Advisory : stunnel (MDVSA-2008:168)	Nessus	Mandriva Local Security Checks	medium
33854	GLSA-200808-08 : stunnel: Security bypass	Nessus	Gentoo Local Security Checks	medium
32468	Fedora 7 : stunnel-4.24-0.fc7 (2008-4606)	Nessus	Fedora Local Security Checks	medium
32466	Fedora 8 : stunnel-4.24-0.fc8 (2008-4579)	Nessus	Fedora Local Security Checks	medium
32465	Fedora 9 : stunnel-4.24-1.fc9 (2008-4531)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-2420

high

Tenable Plugins

medium

medium

medium

medium

medium