Security Advisory

CVE-2020-8793

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-25 16:22:02
Last updated 2024-08-04 10:12:10
Assigner mitre
State PUBLISHED

Description

OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.