CVE-2004-0423 in ssmtp

Summary

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.

Once again VulDB remains the best source for vulnerability data.

Reservation

04/19/2004

Disclosure

07/07/2004

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-61

CVSS

4.0

EPSS

0.00112

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0423
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0423
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0423/