Lucene search

UbuntuUSN-4556-1

HistorySep 29, 2020 - 12:00 a.m.

netqmail vulnerabilities

2020-09-2900:00:00

ubuntu.com

netqmail

ubuntu

security vulnerabilities

email validation

sensitive information disclosure

arbitrary code execution

cve-2005-1513

cve-2005-1514

cve-2005-1515

cve-2020-3811

cve-2020-3812

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.05

Percentile

93.0%

JSON

Releases

Ubuntu 20.04 LTS

Packages

netqmail - a secure, reliable, efficient, simple message transfer agent

Details

It was discovered that netqmail did not properly handle certain input. Both
remote and local attackers could use this vulnerability to cause netqmail
to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514,
CVE-2005-1515)

It was discovered that netqmail did not properly handle certain input when
validating email addresses. An attacker could use this to bypass email
address validation. (CVE-2020-3811)

It was discovered that netqmail did not properly handle certain input when
validating email addresses. An attacker could use this vulnerability to
cause netqmail to disclose sensitive information. (CVE-2020-3812)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchqmail< 1.06-6.2~deb10u1build0.20.04.1UNKNOWN
Ubuntu20.04noarchqmail-uids-gids< 1.06-6.2~deb10u1build0.20.04.1UNKNOWN