Every CVE Search/ Get API key

CVE-2002-0002

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop...

7.5 HighPublic exploit

CVE-2002-0002 is a high vulnerability (CVSS 7.5) in Stunnel, published January 31, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.28%, the 92nd percentile. No source names a fixed version.

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Exploit likelihood

5.28%Down 6.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Record
CVE-2002-0002
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Record
CVE-2002-0002
Updated
2026-11-02
EUVDEUVD-2002-0002 No score

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Record
EUVD-2002-0002
Updated
2026-11-03
GitHub AdvisoriesGHSA-8qj7-vx74-c666 No score

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop...

Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.

Record
GHSA-8qj7-vx74-c666
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSTunnel 3.x - Client Negotiation Protocol Format String2001-12-22

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD

References

Show 4 moreShow less
MoveEnter Open