Debian Security Advisory DSA 485-1 – Max Vozeler discovered two format string vulnerabilities in ssmtp, a simple mail transport agent. Untrusted values in the functions die() and log_event() were passed to printf-like functions as format strings. These vulnerabilities could potentially be exploited by a remote mail relay to gain the privileges of the ssmtp process (including potentially root).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33092/dsa-485.txt
Source: https://packetstormsecurity.com/files/33092/dsa-485.txt.html