EDB-48038

functional

OpenSMTPD - MAIL FROM Remote Code Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2020-02-10catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-7247UScritical9.8OT criticalKEV
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP sessio…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan