Ssmtp

ssmtp

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-3962 1Ssmtp 1Ssmtp Apr 23, 2026 Sep 11, 2008 N/A· v4 N/A· v3 2.6 LOW· v2 The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive informatio...Show more The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message.Show less
CVE-2004-0423 1Ssmtp 1Ssmtp Apr 16, 2026 Jul 7, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
CVE-2004-0156 1Ssmtp 1Ssmtp Apr 16, 2026 Jun 1, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.