Bug#1029067: ssmtp sends parts of its own config file on invalid inputs
Package: ssmtp
Version: ssmtp sends on invalid inputs parts of its own config file
Severity: important
Dear Maintainer,
when running
$ ssmtp root
and then typing
Test[RETURN]
[Ctrl-D]
ssmtp sends a mail with parts of its own configuration and possibly even
other files. The result looks like this:
---
Test
TP aliases
#
# Format: local_account:outgoing_address:mailhub
#
# Example: root:your_login@your.domain:mailhub.your.domain[:port]
# where [:port] is an optional port number that defaults to 25.
is required no
# MX records are consulted. Commonly mailhosts are named mail.domain.com
mailhub=mail
# Where will the mail seem to come from?
rewriteDomain=vms.laxu.de
# The full hostname
hostname=seafile.vms.laxu.de
# Are users allowed to set their own From: address?
# YES - Allow the user to specify their own From: address
# NO - Use the system generated From: address
FromLineOverride=NO
/backups:/usr/sbin/nologin
list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
irc:x:39:39:ircd:/run/ircd:/usr/sbin/nologin
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
...
---
it does not happen, when the input is terminated with a "." on a single
line before sending Ctrl-D.
it looks like it could even be a overflow bug. It didn't crash for me,
through.
-- System Information:
Debian Release: bullseye
Foreign Architectures: i386
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
ssmtp recommends no packages.
ssmtp suggests no packages.
Reply to: