VulnCheck KEV: CVE-2020-7247

smtpmailaddr in smtpsession.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session...

The vulnerability in the smtp_mailaddr function (smtp_session.c) of the OpenSMTPD mail daemon on the OpenBSD operating system allows a hacker to elevate their privileges and execute arbitrary commands with root privileges.

The vulnerability in the smtpmailaddr function smtpsession.c of the OpenSMTPD mail daemon on the OpenBSD operating system is related to the lack of data validation during return operations. Exploitation of this vulnerability allows a remote attacker to execute arbitrary commands with root...

OpenBSD OpenSMTPD Remote Code Execution Vulnerability (CVE-2020-7247)

Qualys Research Labs discovered a vulnerability in OpenBSD's OpenSMTPD mail server that allows an attacker to execute arbitrary shell commands with elevated privileges. OpenBSD developers have confirmed the vulnerability and also quickly provided a patch. Proof-of-concept exploits are published i...