CVE-2020-7247-POC

서문 익스플로잇에 대한 주요 사실 취약한 서버 설치 설정 환경 관련 주의사항 익스플로잇 수동 익스플로잇 스크립트를 이용한 익스플로잇 서문 이 저장소는 통제된 개인 환경에서 CVE-2020-7247을 설정하고 익스플로잇하기 위한 기반을 제공합니다. 게시된 모든 코드와 설정은 오직 이 취약점을 테스트하기 위한 목적이며, 자신의 시스템이 아니거나 익스플로잇 허가를 받지 않은 시스템을 남용하기 위한 것이 아닙니다. 이 저장소의 소유자는 제3자가 이 도구를 사용하는 것에 대해 책임을 지지 않습니다. 익스플로잇에 대한 주요 사실 코드의 ...

SUSE CVE-2020-7247

smtpmailaddr in smtpsession.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration...

Privilege Escalation

OpenDMARC is vulnerable to privilege escaltion. The vulnerability exists due to pypolicyd-spf allowing an attacker to bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

CVE-2019-20790

OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field...

OpenSMTPD Remote Command Execution Vulnerability

OpenSMTPD is a free server-side implementation of the SMTP protocol developed by the OpenBSD team, defined via RFC5321 and part of the OpenBSD project. A remote command execution vulnerability exists in OpenSMTPD. It allows remote attackers to execute arbitrary commands as root via a specially...

ALPINE-CVE-2020-7247

smtpmailaddr in smtpsession.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration...

Input validation

smtpmailaddr in smtpsession.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration...

CVE-2004-1945

The CVE-2004-1945 issue affects the POP3 service of Kinesphere eXchange, where a buffer overflow in the MAIL FROM handling could allow remote attackers to execute arbitrary code. The vulnerability is triggered by a long MAIL FROM field, enabling potential remote code execution with no authenticat...

CVE-2004-1945

Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field...

CVE-2004-1945

Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field...

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service

Avirt Mail 4.04.2 - Mail From: Rcpt to: Denial of Service // source: https://www.securityfocus.com/bid/1825/info Due to insufficient bounds checking in the code that handles the fields 'MAIL FROM:' and 'RCPT TO:', it is possible to remotely crash Avirt Mail. Entering over 272 characters into the...