https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 12:30:48 +0000 https://vulnerability.circl.lu/vuln/cve-2020-7247 <p>smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the &#34;uncommented&#34; default configuration. The issue exists because of an incorrect return value upon failure of input validation.</p> <p>smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the &#34;uncommented&#34; default configuration. The issue exists because of an incorrect return value upon failure of input validation.</p> https://vulnerability.circl.lu/vuln/cve-2020-7247 https://vulnerability.circl.lu/vuln/usn-4268-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: opensmtpd</p> <p>It was discovered that OpenSMTPD incorrectly verified the sender&#39;s or receiver&#39;s e-mail addresses under certain conditions. An attacker could use this vulnerability to execute arbitrary commands as root.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: opensmtpd</p> <p>It was discovered that OpenSMTPD incorrectly verified the sender&#39;s or receiver&#39;s e-mail addresses under certain conditions. An attacker could use this vulnerability to execute arbitrary commands as root.</p> https://vulnerability.circl.lu/vuln/usn-4268-1