CVE-2013-0350: tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/sm...

Security readout for executives and security teams

pktstat 1.8.5 can write SMTP stream content to /tmp/smtp.log in a way that lets a local user abuse symbolic links to overwrite files the pktstat process can write. This is mainly a risk on shared or multi-user systems, especially if pktstat runs with elevated privileges. Exposure is most likely on older Linux or Unix systems with pktstat 1.8.5 installed, particularly shared hosts or systems where untrusted local users can create files in /tmp. Treat as a cleanup and hardening item unless pktstat runs on shared or privileged systems. Prioritize higher where local users are not fully trusted or the tool runs with elevated permissions. Mitigation focus: Inventory systems for pktstat 1.8.5 or distribution packages derived from it.; Check Debian or vendor package guidance for fixed versions or backported patches.; Remove pktstat where it is not operationally required..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.