CVE-2008-7258

2010-08-2018:00:02

CWE-20

mitre

web.nvd.nist.gov

cve-2008-7258

anibal monsalve salazar

ssmtp

denial of service

local users

security impact

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

Percentile

10.3%

JSON

The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact

Affected configurations

Nvd

Node

anibal_monsalve_salazssmtpMatch2.61

anibal_monsalve_salazssmtpMatch2.62

VendorProductVersionCPE
anibal_monsalve_salazssmtp2.61cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.61:*:*:*:*:*:*:*
anibal_monsalve_salazssmtp2.62cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.62:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
anibal_monsalve_salaz	ssmtp	2.61	cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.61:::::::*
anibal_monsalve_salaz	ssmtp	2.62	cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.62:::::::*