CVE-2013-0350: David Leonard Pkstat

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log.

Affected products

• David Leonard Pkstat: version 1.8.5 only

Published 2014-05-05. Last modified 2026-06-16.