CVE-2008-7258

The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact

• CWE-20

• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045407.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045422.html
• http://marc.info/?l=oss-security&m=128013391907262&w=2Exploit
• http://marc.info/?l=oss-security&m=128017258305041&w=2Exploit
• http://marc.info/?l=oss-security&m=128077707318085&w=2
• http://patch-tracker.debian.org/patch/series/view/ssmtp/2.62-3/345780-standardise-bufsizePatch
• http://secunia.com/advisories/41009
• http://www.openwall.com/lists/oss-security/2010/08/19/6Exploit
• http://www.securityfocus.com/bid/41965Exploit
• https://bugs.launchpad.net/ubuntu/+source/ssmtp/+bug/282424
• https://bugzilla.redhat.com/show_bug.cgi?id=582236Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-7258
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045407.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045422.html
• http://marc.info/?l=oss-security&m=128013391907262&w=2Exploit
• http://marc.info/?l=oss-security&m=128017258305041&w=2Exploit
• http://marc.info/?l=oss-security&m=128077707318085&w=2
• http://patch-tracker.debian.org/patch/series/view/ssmtp/2.62-3/345780-standardise-bufsizePatch
• http://secunia.com/advisories/41009
• http://www.openwall.com/lists/oss-security/2010/08/19/6Exploit
• http://www.securityfocus.com/bid/41965Exploit
• https://bugs.launchpad.net/ubuntu/+source/ssmtp/+bug/282424
• https://bugzilla.redhat.com/show_bug.cgi?id=582236Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-7258

Published

Aug 20, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7252libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10…
• CVE-2008-7253The default configuration of the web server in IBM Lotus Dom…
• CVE-2008-7254Directory traversal vulnerability in includes/template-loade…
• CVE-2008-7255login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.9…
• CVE-2008-7256mm/shmem.c in the Linux kernel before 2.6.28-rc8, when stric…
• CVE-2008-7257CRLF injection vulnerability in +webvpn+/index.html in WebVP…
• CVE-2008-7259Rejected reason: This candidate is unused by its CNA.
• CVE-2008-7260Rejected reason: This candidate is unused by its CNA.
• CVE-2008-7261The Workplace (aka WP) component in IBM FileNet P8 Applicati…
• CVE-2008-7262Multiple directory traversal vulnerabilities in FTPServer.py…
• CVE-2008-7263ftpserver.py in pyftpdlib before 0.5.0 does not delay its re…
• CVE-2008-7264The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.…