CVE-2020-7247 : OpenSMTPD Remote Code Execution Vulnerability
Cette vulnérabilité (CVE-2020-7247, score CVSS 9.0) affecte OpenSMTPD et est exploitable à distance via le réseau (sans accès physique ni local) sans aucune authentification préalable (Pré-Auth). Contexte : smtp_mailaddr in smtp_session.c in OpenSMTPD, as used in OpenBSD and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session. Required […]