CVE ID:	CVE-2008-2420
Description:	The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows remote attackers to bypass intended access restrictions by using revoked certificates.
Test IDs:	1.3.6.1.4.1.25623.1.0.860791   1.3.6.1.4.1.25623.1.0.61083   1.3.6.1.4.1.25623.1.0.860737   1.3.6.1.4.1.25623.1.0.860478   1.3.6.1.4.1.25623.1.0.61412   1.3.6.1.4.1.25623.1.0.61081   1.3.6.1.4.1.25623.1.0.61080   1.3.6.1.4.1.25623.1.0.61441
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2420 BugTraq ID: 29309 http://www.securityfocus.com/bid/29309 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00856.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00907.html https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00942.html http://security.gentoo.org/glsa/glsa-200808-08.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:168 http://stunnel.mirt.net/pipermail/stunnel-announce/2008-May/000035.html http://secunia.com/advisories/30335 http://secunia.com/advisories/30425 http://secunia.com/advisories/31438 http://www.vupen.com/english/advisories/2008/1569/references XForce ISS Database: stunnel-ocsp-security-bypass(42528) https://exchange.xforce.ibmcloud.com/vulnerabilities/42528