Vulnerability in Ssmtp

CVE-2004-0423

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.

EPSS: 0.003 (22.3th percentile) — read the EPSS interpretation.

Affected products

  • Ssmtp
  • N/a — versions n/a

References