CVE-2020-8793

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in…

published February 25, 2020

CVSS
—
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00866 · 58.3th percentile
Published
2020-02-25T16:22Z
EPSS history
Timeline
  • 25 FEB 16:22Z
    OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in…
    cvelistv5