The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=108239608131119&w=2 |
Configurations
Information
Published : 2004-07-06 21:00
Updated : 2016-10-17 19:45
NVD link : CVE-2004-0423
Mitre link : CVE-2004-0423
JSON object : View
CWE
Products Affected
ssmtp
- ssmtp