Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0740. PoCs published by Steve Grubb.
AI-analyzed exploit summary This exploit leverages a signal handling flaw in stunnel to leak a file descriptor and maintain control after the parent process is killed. It forks, sends SIGUSR2 to the parent, and then uses the leaked descriptor to serve an HTTP response.
Description
Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.
Exploits (1)
This exploit leverages a signal handling flaw in stunnel to leak a file descriptor and maintain control after the parent process is killed. It forks, sends SIGUSR2 to the parent, and then uses the leaked descriptor to serve an HTTP response.