low2.1
CVE-2004-0423
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
Impact
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ssmtp | Ssmtp | through 2.50.6 |