CVE-2004-0156: Ssmtp

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.

Affected products

• Ssmtp Ssmtp: up to and including 2.49

Published 2004-06-01. Last modified 2026-06-16.