The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a     denial of service (application exit) via an e-mail message containing a long line that begins with a .
    (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of     messages with certain long lines, and has no security impact (CVE-2008-7258)

Note that Nessus relies on the presence of the package as reported by the vendor.

Corrected patch for the 'standardise() -- Buffer overflow' bug.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
254132	Linux Distros Unpatched Vulnerability : CVE-2008-7258	Nessus	Misc.	medium
48326	Fedora 13 : ssmtp-2.61-15.fc13 (2010-11836)	Nessus	Fedora Local Security Checks	low
48325	Fedora 12 : ssmtp-2.61-15.fc12 (2010-11811)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2008-7258

medium

Tenable Plugins

medium

low

low