CVE-2020-8793

Description

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.

Risk Information

Base Score

4.7

MODERATE

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.786

Associated Vulnerability

Vulnerability	OS Platform
secure, reliable, lean, and easy-to configure SMTP server (USN-4294-1) opensmtpd_6.0.3p1-1ubuntu0.2_i386.deb	Linux
secure, reliable, lean, and easy-to configure SMTP server (USN-4294-1) opensmtpd_6.0.3p1-1ubuntu0.2_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234