Stunnel OCSP Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	29309
Class:	Design Error
CVE:	CVE-2008-2420
Remote:	Yes
Local:	No
Published:	May 19 2008 12:00AM
Updated:	Aug 14 2008 02:36PM
Credit:	Stunnel
Vulnerable:	Stunnel Stunnel 4.23 Red Hat Fedora 9 Red Hat Fedora 8 Red Hat Fedora 7 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Gentoo Linux

Not Vulnerable:	Stunnel Stunnel 4.24