CVE-2004-0423

LOW 2.1CVE-2004-0423 · Published 07/07/2004 · updated 16/06/2026

In short

CVE-2004-0423 is a LOW (CVSS 2.1) vulnerability affecting ssmtp (ssmtp).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 22.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ssmtp ssmtp	`≤ 2.50.6`	No fix yet

Description

The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.

References

marc.info

More vulnerabilities in ssmtp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free