https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:18:10 +0000 https://vulnerability.circl.lu/vuln/cve-2020-8793 <p>OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.</p> <p>OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.</p> https://vulnerability.circl.lu/vuln/cve-2020-8793 https://vulnerability.circl.lu/vuln/usn-4294-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: opensmtpd</p> <p>It was discovered that OpenSMTPD mishandled certain input. A remote, unauthenticated attacker could use this vulnerability to execute arbitrary shell commands as any non-root user. (CVE-2020-8794)</p> <p>It was discovered that OpenSMTPD did not properly handle hardlinks under certain conditions. An unprivileged local attacker could read the first line of any file on the filesystem. (CVE-2020-8793)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: opensmtpd</p> <p>It was discovered that OpenSMTPD mishandled certain input. A remote, unauthenticated attacker could use this vulnerability to execute arbitrary shell commands as any non-root user. (CVE-2020-8794)</p> <p>It was discovered that OpenSMTPD did not properly handle hardlinks under certain conditions. An unprivileged local attacker could read the first line of any file on the filesystem. (CVE-2020-8793)</p> https://vulnerability.circl.lu/vuln/usn-4294-1