CVE-2020-8793 | BDVDB-2026-131349 Detail

Description#

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.openbsd.org/security.html
http://www.openwall.com/lists/oss-security/2020/02/24/4
http://seclists.org/fulldisclosure/2020/Feb/28
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/
https://usn.ubuntu.com/4294-1/

Exploit#

No public exploit known

History#

Version 12020-02-25Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.