EDB-48139

PoC

OpenSMTPD 6.6.3 - Arbitrary File Read

view exploit source exploit_dbtype remoteauthor Qualys Corporationpublished 2020-02-26catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-8793USmedium4.7Exploit
OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race con…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan