andrew richards vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.

Netqmail Netqmail 1.06 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 20.04

5.5

CVSSv3

qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker's...

Netqmail Netqmail 1.06 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 20.04

NA

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced wi...

Dan Bernstein Qmail

NA

Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO...

Dan Bernstein Qmail

9.8

CVSSv3

Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a large SMTP request.

Qmail Project Qmail -Canonical Ubuntu Linux 20.04 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook