Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2020-7247

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary co

Published
Last modified
published
Listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

OpenSMTPD 6.6, the mail server software included in OpenBSD 6.6 and some other products, is affected. A remote attacker who sends a specially crafted SMTP session can run arbitrary commands with root privileges, which could lead to complete control of the affected system.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 14

openbsd.org

openwall.com

GitHub · openbsd/src

packetstormsecurity.com

seclists.org

debian.org

kb.cert.org

usn.ubuntu.com

lists.fedoraproject.org