stunnel: certificate verification issue
| Package(s): | stunnel | CVE #(s): | CVE-2008-2420 | ||||||||||||||||||||
| Created: | May 30, 2008 | Updated: | August 14, 2008 | ||||||||||||||||||||
| Description: | From the Red Hat alert: The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||