EDB-48140

PoC

OpenSMTPD < 6.6.3p1 - Local Privilege Escalation + Remote Code Execution

view exploit source exploit_dbtype remoteauthor Qualys Corporationpublished 2020-02-26catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-8794UScritical9.8Exploit
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the clie…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan