📚 Medium CVE-2020-8793: Opensmtpd Opensmtpd
💡 Newskategorie: Sicherheitslücken
🔗 Quelle: cxsecurity.com
OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c. ...