Lucene search

K
osvGoogleOSV:USN-4556-1
HistorySep 29, 2020 - 3:16 p.m.

netqmail vulnerabilities

2020-09-2915:16:58
Google
osv.dev
15
netqmail
input handling
vulnerabilities
remote attackers
local attackers
code execution
email addresses
disclosure
sensitive information
cve-2005-1513
cve-2005-1514
cve-2005-1515
cve-2020-3811
cve-2020-3812
software

AI Score

7.4

Confidence

High

EPSS

0.05

Percentile

93.0%

It was discovered that netqmail did not properly handle certain input. Both
remote and local attackers could use this vulnerability to cause netqmail
to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514,
CVE-2005-1515)

It was discovered that netqmail did not properly handle certain input when
validating email addresses. An attacker could use this to bypass email
address validation. (CVE-2020-3811)

It was discovered that netqmail did not properly handle certain input when
validating email addresses. An attacker could use this vulnerability to
cause netqmail to disclose sensitive information. (CVE-2020-3812)