CVE-2008-7258
** DISPUTED ** The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows...
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
Exploit likelihood
What each source reports
NVD Score used
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
- Record
CVE-2008-7258- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
- Record
CVE-2008-7258- Updated
- 2026-11-02
EUVDEUVD-2008-7214 No score
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
- Record
EUVD-2008-7214- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vqmw-m2f5-rq3c No score
** DISPUTED ** The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows...
** DISPUTED ** The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact.
- Record
GHSA-vqmw-m2f5-rq3c- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
- Record
CVE-2008-7258- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-7258 No score
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service (application exit) via an e-mail message containing a long line that begins with a . (dot) character. NOTE: CVE disputes this issue because it is solely a usability problem for senders of messages with certain long lines, and has no security impact
- Record
DEBIAN-CVE-2008-7258- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ssmtpDebian:12 |
All versions, plus listed versions 2.64-112.64-122.64-132.65-12.66-1 |
None known |
ssmtpDebian:13 |
All versions, plus listed versions 2.64-122.64-132.65-12.66-1 |
None known |
ssmtpDebian:14 |
All versions, plus listed versions 2.64-122.64-132.65-12.66-1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | sSMTP 2.62 - 'standardize()' Buffer Overflow | 2010-07-26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-7258 is a low vulnerability (CVSS 2.1) in Anibal Monsalve Salaz Ssmtp, published August 20, 2010. Its validity is disputed. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.05%, the 64th percentile.
References
securityfocus.com/bid/41965
bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-7258
lists.fedoraproject.org/pipermail/package-announce/2010-August/045422.html
patch-tracker.debian.org/patch/series/view/ssmtp/2.62-3/345780-standardise-bufsize
marc.info?l=oss-security&m=128017258305041&w=2
openwall.com/lists/oss-security/2010/08/19/6
Show 9 moreShow less
secunia.com/advisories/41009
bugs.launchpad.net/ubuntu/+source/ssmtp/+bug/282424
nvd.nist.gov/vuln/detail/CVE-2008-7258
github.com/advisories/GHSA-vqmw-m2f5-rq3c
security-tracker.debian.org/tracker/CVE-2008-7258