opensmtpd: arbitrary commands execution in smtp_mailaddr in smtp_session.c via crafted SMTP session
CVSS score
8.8
EPSS probability
%99.0
Risk score
17.4
Published
6 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution
OpenSMTPD - MAIL FROM Remote Code Execution (Metasploit)
OpenSMTPD 6.6.1 - Remote Code Execution
Nuclei: OpenSMTPD 6.4.0-6.6.1 - Remote Code Execution
This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtp_mailaddr()” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user
Vulhub opensmtpd/CVE-2020-7247: OpenSMTPD MAIL FROM Command Injection (CVE-2020-7247), run with Isoloom
PoC exploit for CVE-2020-7247 OpenSMTPD 6.4.0 < 6.6.1 Remote Code Execution
minhluannguyen/CVE-2020-7247-reproducer
OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploit
Proof of concept for CVE-2020-7247 for educational purposes.
OpenSMTPD version 6.6.2 remote code execution exploit
Similar Vulnerabilities
Openssh: regresshion - race condition in ssh allows rce/dos
Vulnerability in N/a
Vulnerability in N/a
Vulnerability in N/a
Path traversal in N/a
Openssh: denial-of-service in openssh
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-7247"