CVE-2020-8794

This Metasploit module exploits CVE-2020-8794, an out-of-bounds read vulnerability in OpenSMTPD, to achieve local privilege escalation. It leverages a malformed SMTP message to execute arbitrary commands as root or nobody, depending on the OpenSMTPD grammar version.

This Metasploit module exploits CVE-2020-8794, an out-of-bounds read vulnerability in OpenSMTPD, to achieve local privilege escalation by sending a malformed SMTP message to execute arbitrary commands as root or nobody, depending on the grammar version.

This exploit demonstrates a local privilege escalation (LPE) and remote code execution (RCE) vulnerability in OpenSMTPD's default installation. It leverages a flaw in the SMTP server's grammar parsing to inject arbitrary commands, allowing an attacker to execute code as the root user.