what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 35

Files from Michal Trojnara

Stunnel SSL Wrapper 4.48

Posted Nov 27, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: FIPS-compliant OpenSSL DLLs are supplied with the Windows installer. FIPS mode can be disabled with the "fips = no" configuration file option. The stability of the Windows GUI was also improved.

tags | tool, arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 9fa723595726806cbf6547a2c453e695e33bf635f2d4771e80d110a06f27ea37

Download | Favorite | View

Stunnel SSL Wrapper 4.47b1

Posted Nov 8, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: This release adds Unix socket support and a new certificate verification mode to ignore the CA chain and only verify the peer certificate. It also includes some performance and scalability optimizations, and compilation bugfixes.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | d12d3d92de6801d03d0dd0bd9b58d169489120f7770e5ac648165b8f34080b14

Download | Favorite | View

Stunnel SSL Wrapper 4.45

Posted Oct 25, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: New "protocol = proxy" support was added to send the original client IP address to haproxy. This requires the accept-proxy bind option of haproxy 1.5-dev3 or later. A number of minor improvements and bugfixes were added, mostly related to Win32 GUI and compilation issues on various platforms.

tags | tool, arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | cbce8279c1ba7a07bfefeb2e477f682bfd326519f8a7ed296e35210599898a2d

Download | Favorite | View

Stunnel SSL Wrapper 4.44

Posted Sep 19, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Bugs in the new SNI and memory management code were fixed. Buffer overflow protection was implemented for heap allocations, and gcc buffer overflow protection was enabled for stack allocations.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | fa0dfc33f323abfbc94aa993d90d37481cd2f652ee93ec2f8c333ac7a496c7b9

Download | Favorite | View

Stunnel SSL Wrapper 4.43

Posted Sep 8, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Win32 OpenSSL DLLs were updated to version 1.0.0e. This version fixes Win32 configuration file reload. FORK and UCONTEXT threading models were corrected and thoroughly tested. Major performance optimization was performed on the logging subsystem.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 93a002d9e1652d7684756af75b44b00f99aa93574e8a5a2e69f88656221d5ce2

Download | Favorite | View

Citrix Gateway ActiveX Control Stack Based Buffer Overflow

Posted Aug 31, 2011

Authored by Michal Trojnara, bannedit, sinn3r | Site metasploit.com

This Metasploit module exploits a stack based buffer overflow in the Citrix Gateway ActiveX control. Exploitation of this vulnerability requires user interaction. The victim must click a button in a dialog to begin a scan. This is typical interaction that users should be accustom to. Exploitation results in code execution with the privileges of the user who browsed to the exploit page.

tags | exploit, overflow, code execution, activex

advisories | CVE-2011-2882, OSVDB-74191

SHA-256 | 09d9e8b876ca54fa2ea6081f2db151f089cbcc1f38aaa0b3ae3a8349a4c63825

Download | Favorite | View

Stunnel SSL Wrapper 4.42b2

Posted Jul 27, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: This release fixes a Windows service crash of stunnel 4.40.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 21a2bf0337773fa1b7824e556bc80a5730e673c537c9392fd477199d866c6b99

Download | Favorite | View

Stunnel SSL Wrapper 4.40

Posted Jul 24, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: A Win32 GUI menu was added to save cached peer certificate chains. The Win32 "-exit" commandline option was added to stop stunnel when it is not running as a service. File version information was added to stunnel.exe. 2048-bit DH hardcoded parameters are used as a fallback if DH parameters are not provided in stunnel.pem. The default "ciphers" value was updated to prefer ECDH. The default ECDH curve was updated to "prime256v1". Support for temporary RSA keys (used in obsolete export ciphers) was removed.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 91f32c7654dde0e1cf37ed0d8517e0d0b5985cd30443a9d64cd33d232b5fe9ce

Download | Favorite | View

iDefense Security Advisory 07.14.11 - Citrix Code Execution

Posted Jul 16, 2011

Authored by Michal Trojnara, iDefense Labs | Site idefense.com

iDefense Security Advisory 07.14.11 - Remote exploitation of a buffer overflow in Citrix Systems, Inc.'s Access Gateway Client ActiveX control allows remote attackers to execute arbitrary code. To exploit this vulnerability, a targeted user must load a malicious Web page created by an attacker. An attacker typically accomplishes this via social engineering or injecting content into compromised, trusted sites. Versions affected are 8.1 prior to 8.1-67.7, 9.0 prior to 9.0-70.5, and 9.1 prior to 9.1-96.4.

tags | advisory, remote, web, overflow, arbitrary, activex

SHA-256 | 7da340d19926e061e5ff91def8e4cab80314786c667bc814ad98db464a3d4ca0

Download | Favorite | View

Stunnel SSL Wrapper 4.39

Posted Jul 7, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: A new Windows installer module was added to build a self-signed stunnel.pem. Configuration file editing and log file reopening were added to the Windows GUI. Configuration file reloading with the Windows GUI was improved.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 972e4c150e3012ba8777f149c858e1e290aeb7ad7976e1551ac1752bc04fb0ed

Download | Favorite | View

Stunnel SSL Wrapper 4.38

Posted Jun 29, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Server Name Indication (SNI) TLS extension support was implemented for name-based virtual servers. Stunnel can now switch service section on the fly, based on the destination host name included in the Client Hello message. Numerous fixes were also added for bugs introduced in previous, experimental versions.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | aa49012195fde4dc3e4bed2bb25283cb40a6e0ad8295a47e730652f611e2268c

Download | Favorite | View

Stunnel SSL Wrapper 4.36

Posted May 4, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Win32 OpenSSL DLLs were updated to version 1.0.0d. Dynamic memory was introduced for management of string manipulation in order to prevent a static STRLEN limit and to lower stack footprint. Strict public key comparison was added for "verify = 3" certificate checking mode. Backlog parameter of listen(2) was changed from 5 to SOMAXCONN to improve behavior on heavy load. A number of bugs were fixed, including a memory leak and some Mac OS X compatibility fixes.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 3483fc2011e8a9d2614a93a9dbf7eabf405044df3566f29144fe2d1dd37a35f5

Download | Favorite | View

Stunnel SSL Wrapper 4.35

Posted Feb 7, 2011

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: OpenSSL DLLs were updated to version 1.0.0c. Transparent source (non-local bind) support was added for FreeBSD 8.x. Transparent destination ("transparent = destination") support was added for Linux. A number of bugfixes were also implemented.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | a810e220498239483e14fae24eeb2a188a6167e9118958b903f8793768c4460f

Download | Favorite | View

Stunnel SSL Wrapper 4.33

Posted Apr 7, 2010

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Win32 DLLs were updated to OpenSSL 1.0.0 and zlib 1.2.4. Experimental support was added for local mode on the Win32 platform. Inetd mode was fixed.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 240763140000dea6ab76b30f5f5571a8ef4d22ba0712176a9c31c221bb9a48fc

Download | Favorite | View

Stunnel SSL Wrapper 4.32

Posted Mar 25, 2010

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: The service-level "libwrap" option was added for run-time control over whether /etc/hosts.allow and /etc/hosts.deny are used for access control. Win32 DLLs were added for OpenSSL 0.9.8m. Some bugs were fixed.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 2b6809de99cb18e69760b78f88da447f6071227606adab7f35db330c6f01e8bd

Download | Favorite | View

Stunnel SSL Wrapper 4.31

Posted Feb 4, 2010

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Log file reloading with SIGUSR1 was added. Some regression issues introduced in the experimental version 4.30 were fixed.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 187d0df2701d51c09b66f120cf6f1a62c4161e3e58dc84f893c1e5c7ccf30262

Download | Favorite | View

stunnel-4.30.tar.gz

Posted Feb 4, 2010

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Configuration can be gracefully reloaded with a HUP signal on Unix and with the GUI on Windows.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | cc544d65aa4d60a0f91e21a6930824ab0588813e3a05c5a9d8020fff47dca841

Download | Favorite | View

Stunnel SSL Wrapper 4.28

Posted Nov 17, 2009

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: A serious bug in asynchronous shutdown code was fixed. Win32 DLLs have been added for OpenSSL 0.9.8l. Transparent proxy support was added for Linux kernels versions 2.6.28 and above.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 9be98fb1aa5e96e44095df267d89b776aa539e6dce90dd0d54db675e9a95cd80

Download | Favorite | View

Stunnel SSL Wrapper

Posted Apr 23, 2009

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.

Changes: Win32 DLLs were provided for OpenSSL 0.9.8k. FIPS support was updated for openssl-fips 1.2. A new priority failover strategy was implemented for multiple "connect" targets. pgsql protocol negotiation was added.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | c260a6544a39c3cff59626ca6bc7c14087dc4d4fab95c6cddd7dddd81df87cfb

Download | Favorite | View

stunnel-4.04.tar.gz

Posted Nov 24, 2003

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. Windows binaries available here.

Changes: Stunnel 4.03 and earlier does not properly handle SIGCHLD signals safely, allowing remote users to hijack the service.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | b7e937734dfc93527e05a6daf2a54da538c3d6ab050a2ade35b56ab16cec7791

Download | Favorite | View

stunnel-3.26.tar.gz

Posted Nov 24, 2003

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. Windows binaries available here.

Changes: Stunnel 3.24 and earlier (as well as 4.0x x<4) does not properly handle SIGCHLD signals safely, allowing remote users to hijack the service.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | d2a55b089d46d14bc4b456bb1927303492dab6649867c67a005d2c9d1ededfb3

Download | Favorite | View

stunnel-4.03.tar.gz

Posted Dec 27, 2002

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. Windows binaries available here.

Changes: NT Services work again, memory leaks fixed.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 61e51010a9f5607ef22ee081ec9779a36b84263324c21ccfbf0333aafc617056

Download | Favorite | View

stunnel-4.02.tar.gz

Posted Oct 22, 2002

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. Windows binaries available here.

Changes: Please upgrade and fix vulnerabilities in OpenSSL-0.9.6d and below that are exploitable.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 3f292c6513d671f71f3fb635363a9f819662fc4c0989be4dc1e6ba7edbc7e14e

Download | Favorite | View

stunnel-3.22.tar.gz

Posted Jan 1, 2002

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. Windows binaries available here.

Changes: A fix for a format string vulnerability in protocol.c smtp (POP3 and NNTP in client mode were affected). Upgrade strongly recommended.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 28df35d2fcb7c0d974d426adc071127afe562dd44ccd3feb96d50673456d30ec

Download | Favorite | View

stunnel-3.21c.tar.gz

Posted Nov 14, 2001

Authored by Michal Trojnara | Site stunnel.org

Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code. Windows binaries available here.

Changes: Includes DLLs for OpenSSL 0.9.6b. Updated autoconf scripts and docs.

tags | arbitrary, encryption, tcp, imap, protocol

systems | windows, unix

SHA-256 | 46b40e6c5e18997904ac098eb57f3c539feb3c92fdf18c475e4524a3b97ceb8c

Download | Favorite | View