2.1

CVE-2008-7258

Exploit
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character.  NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Anibal Monsalve Salaz ≫ Ssmtp Version2.61
Anibal Monsalve Salaz ≫ Ssmtp Version2.62
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.599
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045407.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045422.html
http://marc.info/?l=oss-security&m=128013391907262&w=2
Exploit
http://marc.info/?l=oss-security&m=128017258305041&w=2
Exploit
http://marc.info/?l=oss-security&m=128077707318085&w=2
http://patch-tracker.debian.org/patch/series/view/ssmtp/2.62-3/345780-standardise-bufsize
Patch
http://secunia.com/advisories/41009
http://www.openwall.com/lists/oss-security/2010/08/19/6
Exploit
http://www.securityfocus.com/bid/41965
Exploit
https://bugs.launchpad.net/ubuntu/+source/ssmtp/+bug/282424
https://bugzilla.redhat.com/show_bug.cgi?id=582236
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-7258