Max Vozeler has reported two vulnerabilities in sSMTP, allowing malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to format string errors within the "die()" and "log_event()" functions. This can be exploited to crash the server and potentially execute arbitrary code by including format specifiers in certain parameters.

Solution
Use another product.

Provided and/or discovered by
Max Vozeler

Deep Links
Links available to Secunia VIM customers