CVE-2008-7258

2010-08-2018:00:02

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

Percentile

10.3%

JSON

The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact

Affected configurations

Nvd

Node

anibal_monsalve_salazssmtpMatch2.61

anibal_monsalve_salazssmtpMatch2.62

VendorProductVersionCPE
anibal_monsalve_salazssmtp2.61cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.61:*:*:*:*:*:*:*
anibal_monsalve_salazssmtp2.62cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.62:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
anibal_monsalve_salaz	ssmtp	2.61	cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.61:::::::*
anibal_monsalve_salaz	ssmtp	2.62	cpe:2.3:a:anibal_monsalve_salaz:ssmtp:2.62:::::::*