module
OpenSMTPD MAIL FROM Remote Code Execution
Disclosed | Created |
---|---|
Jan 28, 2020 | Feb 7, 2020 |
Disclosed
Jan 28, 2020
Created
Feb 7, 2020
Description
This module exploits a command injection in the MAIL FROM field during
SMTP interaction with OpenSMTPD to execute a command as the root user.
SMTP interaction with OpenSMTPD to execute a command as the root user.
Authors
Qualys
wvu wvu@metasploit.com
RageLtMan rageltman@sempervictus
wvu wvu@metasploit.com
RageLtMan rageltman@sempervictus
Platform
Unix
Architectures
cmd
References
Module Options
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.