CVE-2008-3962

The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message…

published September 10, 2008

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01985 · 80.3th percentile
Published
2008-09-10T15:00Z
EPSS history
Timeline
  • 10 SEP 15:00Z
    The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message…
    cvelistv5