6 matches found
CVE-2008-3962
The fromformat function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information memory contents in opportunistic circumstances by reading a message...
CVE-2008-3962
The fromformat function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information memory contents in opportunistic circumstances by reading a message...
CVE-2008-3962
The fromformat function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information memory contents in opportunistic circumstances by reading a message...
Format string
The fromformat function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information memory contents in opportunistic circumstances by reading a message...
sSMTP 'from_format()'未初始化内存信息泄漏漏洞
BUGTRAQ ID: 31094 CVE ID:CVE-2008-3962 CNCVE ID:CNCVE-20083962 Anibal Monsalve Salazar sSMTP是一款sendmail的可替代程序。 sSMTP 'fromformat'存在设计问题,远程攻击者可以利用漏洞获得敏感信息。 'fromformat'利用未初始化内存,可导致敏感信息泄漏。 Gentoo Linux Anibal Monsalve Salazar sSMTP 2.62 可参考如下补丁: https://bugs.gentoo.org/attachment.cgi?id=165005...
CVE-2008-3962
The fromformat function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information memory contents in opportunistic circumstances by reading a message...