Vulnerabilities

TI-2008-03801 CVE-2008-3962 · GHSA-7qfh-vrpj-2j69

The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations…

LOW 17

The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive informatio…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01985 Published 2008-09-10 No fix listed CWE-200

TI-2004-00387 CVE-2004-0423 · GHSA-m664-4g2h-4p39

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite…

LOW 11

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.003 Published 2004-04-20 No fix listed

TI-2004-00132 CVE-2004-0156 · GHSA-q5x9-4p6f-q4m6

Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before…

LOW 29

Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03504 Published 2004-04-17 No fix listed

Vulnerabilities

Filters

The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations…

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite…

Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before…