Security News > 2020 > January > Serious Vulnerability Discovered in OpenSMTPD
2020-01-29 16:26
Researchers at cybersecurity firm Qualys have identified a potentially serious vulnerability in OpenSMTPD that can allow remote command execution with elevated privileges.
OpenSMTPD is the OpenBSD Project's free and open source implementation of the Simple Mail Transfer Protocol.
The portable version of OpenSMTPD can run on various BSD and Linux distributions, as well as Apple's Mac OS X operating system.
According to Qualys, OpenSMTPD is affected by a vulnerability that can allow an attacker to execute arbitrary shell commands with root privileges.
The maintainers of OpenSMTPD have released patches for the vulnerability and they have urged users to apply them as soon as possible.