CVE-2008-3962
EPSS 0.61%Published: 9/11/2008Modified: 4/28/2026
Description
The from_format function in ssmtp.c in ssmtp 2.61 and 2.62, in certain configurations, uses uninitialized memory for the From: field of an e-mail message, which might allow remote attackers to obtain sensitive information (memory contents) in opportunistic circumstances by reading a message.
Affected packages (1)
- Debian/ssmtpfrom 0, < 2.62-1.1