CVE-2003-0740: Stunnel

Medium severity, CVSS 4.6. EPSS: 0.7% chance of exploitation in the next 30 days.

Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.

Affected products

• Stunnel Stunnel: version 3.3 only; version 3.4a only; version 3.7 only; version 3.8 only; version 3.9 only; version 3.10 only; …

Published 2003-10-20. Last modified 2026-06-16.