CVE-2020-7247— Openbsd Opensmtpd代码问题漏洞
公开利用映射 4
Metasploit · 1 opensmtpd_mail_from_rce.rb [exploit]
已观察到在野利用 cisa_kev · confirmed
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2020-7247 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Openbsd Opensmtpd代码问题漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Openbsd Opensmtpd是Openbsd组织的一个基于RFC 5321的SMTP服务端软件。 Openbsd Opensmtpd 存在代码问题漏洞。远程攻击者可通过特制的SMTP session利用该漏洞以root权限执行任意命令。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
二、漏洞 CVE-2020-7247 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Python exploit of cve-2020-7247 | https://github.com/FiroSolutions/cve-2020-7247-exploit | POC详情 |
| 2 | OpenSMTPD version 6.6.2 remote code execution exploit | https://github.com/superzerosec/cve-2020-7247 | POC详情 |
| 3 | Proof Of Concept Exploit for CVE-2020-7247 (Remote Execution on OpenSMTPD < 6.6.2 | https://github.com/r0lh/CVE-2020-7247 | POC详情 |
| 4 | OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploit | https://github.com/QTranspose/CVE-2020-7247-exploit | POC详情 |
| 5 | This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtp_mailaddr()” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user | https://github.com/bytescrappers/CVE-2020-7247 | POC详情 |
| 6 | PoC exploit for CVE-2020-7247 OpenSMTPD 6.4.0 < 6.6.1 Remote Code Execution | https://github.com/f4T1H21/CVE-2020-7247 | POC详情 |
| 7 | Proof of concept for CVE-2020-7247 for educational purposes. | https://github.com/SimonSchoeni/CVE-2020-7247-POC | POC详情 |
| 8 | Worm written in python, abuses CVE-2020-7247 | https://github.com/presentdaypresenttime/shai_hulud | POC详情 |
| 9 | CVE-2020-7247 Remote Code Execution POC | https://github.com/gatariee/CVE-2020-7247 | POC详情 |
| 10 | None | https://github.com/minhluannguyen/CVE-2020-7247-reproducer | POC详情 |
| 11 | OpenSMTPD versions 6.4.0 - 6.6.1 are susceptible to remote code execution. smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation. | https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-7247.yaml | POC详情 |
| 12 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/OpenSMTPD%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2020-7247.md | POC详情 |
| 13 | https://github.com/vulhub/vulhub/blob/master/opensmtpd/CVE-2020-7247/README.md | POC详情 |
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2020-7247 的情报信息
请登录查看更多情报信息。
CVE-2020-7247 补丁与修复 (1)
CVE-2020-7247 厂商安全公告 (1)
CVE-2020-7247 公开利用代码 (4)
CVE-2020-7247 邮件列表归档 (4)
- http://www.openwall.com/lists/oss-security/2020/01/28/3x_refsource_MISC
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPH4QU4DNVHA7ACFXMYFCEP5PSXXPN4E/vendor-advisoryx_refsource_FEDORA
CVE-2020-7247 其他参考 (1)
- https://www.openbsd.org/security.htmlx_refsource_CONFIRM
同批安全公告 · n/a · 2020-01-29 · 共 28 条
| CVE-2019-18634 | Sudo 缓冲区错误漏洞 | |
| CVE-2019-20215 | D-Link DIR-859 操作系统命令注入漏洞 | |
| CVE-2019-20216 | D-Link DIR-859 操作系统命令注入漏洞 | |
| CVE-2019-20217 | D-Link DIR-859 操作系统命令注入漏洞 | |
| CVE-2020-7965 | Webargs 跨站请求伪造漏洞 | |
| CVE-2012-5776 | Dokeos 跨站脚本漏洞 | |
| CVE-2019-7654 | Wowza Media Systems Streaming Engine 跨站请求伪造漏洞 | |
| CVE-2019-7656 | Wowza Media Systems Streaming Engine 跨站脚本漏洞 | |
| CVE-2019-7655 | Wowza Media Systems Streaming Engine 跨站脚本漏洞 | |
| CVE-2020-8416 | BearFTP 资源管理错误漏洞 | |
| CVE-2013-2567 | Zavio IP Cameras 信任管理问题漏洞 | |
| CVE-2013-2568 | Zavio IP Cameras 操作系统命令注入漏洞 | |
| CVE-2013-2569 | Zavio IP Cameras 授权问题漏洞 | |
| CVE-2013-3215 | Vtiger CRM 授权问题漏洞 | |
| CVE-2020-8438 | Ruckus ZoneFlex R500 操作系统命令注入漏洞 | |
| CVE-2013-2570 | Zavio IP Cameras 操作系统命令注入漏洞 | |
| CVE-2013-2572 | 多款TP-LINK产品信任管理问题漏洞 | |
| CVE-2013-2573 | TP-LINK IP Cameras TL-SC 3130G、3171G和4171G 操作系统命令注入漏洞 | |
| CVE-2020-8432 | Das U-Boot 资源管理错误漏洞 | |
| CVE-2013-2574 | FOSCAM IP-Camera 安全漏洞 |
显示前 20 条，共 28 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-7247
暂无评论