VULNERABILITY INTELLIGENCE

CVE-2008-7258

CVSS score2.1 LOW
EPSS probability1.05%
CISA KEVNot currently listed
Published2010-08-20
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P

Description

The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact

Weakness classification

  • CWE-20: Improper Input Validation

Primary references