Описание
Security update for stunnel
This update fixes an authentication bypass when using the 'redirect' option (CVE-2015-3644, bsc#931517, backport from v5.17).
Список пакетов
SUSE Linux Enterprise Server 12
stunnel-5.00-3.1
SUSE Linux Enterprise Server for SAP Applications 12
stunnel-5.00-3.1
Ссылки
- Link for SUSE-SU-2015:1062-1
- E-Mail link for SUSE-SU-2015:1062-1
- SUSE Security Ratings
- SUSE Bug 931517
- SUSE CVE CVE-2015-3644 page
Описание
Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.
Затронутые продукты
SUSE Linux Enterprise Server 12:stunnel-5.00-3.1
SUSE Linux Enterprise Server for SAP Applications 12:stunnel-5.00-3.1
Ссылки
- CVE-2015-3644
- SUSE Bug 1177580
- SUSE Bug 931517