CVE-2004-2088

Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...

CVE-2004-2088

Sophos Anti-Virus 3.78 is affected. The vulnerability allows remote attackers to bypass the virus scan by crafting a qmail-generated Delivery Status Notification (DSN) that omits the original email in the bounce message. The core issue is the DSN handling during bounce processing, enabling bypass...

CVE-2005-1515

Integer signedness error in the qmailput and substdioput functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands...

CVE-2005-1515

Integer signedness error in the qmailput and substdioput functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands...

CVE-2005-1513

Integer overflow in the strallocreadyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request...

CVE-2005-1514

Removed by vendor...

CVE-2005-1515

CVE-2005-1513, CVE-2005-1514, CVE-2005-1515, CVE-2020-3811, CVE-2020-3812 are referenced in the Debian DLA-2234-1 advisory for netqmail. The Debian advisory reports multiple issues in netqmail (qmail) affecting 64-bit platforms with large memory, including: CVE-2005-1513 (overflow in stralloc_rea...

CVE-2005-1514

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index...

CVE-2005-1515

Removed by vendor...

CVE-2005-1514

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index...

CVE-2005-1514

CVE-2005-1514 affects netqmail (qmail) on 64‑bit platforms with large virtual memory. The vulnerability in commands.c allows a remote attacker to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space, leading to an array referenced with a negative i...

CVE-2005-1513

Integer overflow in the strallocreadyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request...

CVE-2005-1513

Removed by vendor...

PT-2005-1103 · Dan Bernstein +2 · Qmail +2

Name of the Vulnerable Software and Affected Versions: qmail affected versions not specified Description: The issue is caused by an integer overflow in the stralloc readyplus function in qmail. This allows remote attackers to cause a denial of service and possibly execute arbitrary code via a lar...

CVE-2005-1513

CVE-2005-1513 is a known vulnerability in netqmail (qmail) involving an integer overflow in the stralloc_readyplus function when run on 64-bit platforms with large memory. This can allow a remote attacker to cause a denial of service and potentially execute arbitrary code via a large SMTP request...

Qmail mail server 64-bit platforms integer overflow

No description provided...

[Full-disclosure] 64 bit qmail fun

Georgi Guninski security advisory 74, 2005 64 bit qmail fun Systems affected: qmail on 64 bit platforms with a lot of virtual memory 8GB Date: 6 May 2005 Legal Notice: This Advisory is Copyright c 2004 Georgi Guninski. You may not modify it and distribute it or distribute parts of it without the...

qmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests

Georgi Guninski writes: There are several issues with qmail on 64 bit platforms - classical integer overflow, pointer with signed index and signedness problem not counting the memory consumtion dos, which just helps. Update: the problem with the signed index is exploitable on Freebsd 5.4 amd64 wi...

qmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests

Georgi Guninski writes: There are several issues with qmail on 64 bit platforms - classical integer overflow, pointer with signed index and signedness problem not counting the memory consumtion dos, which just helps. Update: the problem with the signed index is exploitable on Freebsd 5.4 amd64 wi...

qmail -- 64 bit integer overflows with possible remote code execution on large SMTP requests

Georgi Guninski writes: There are several issues with qmail on 64 bit platforms - classical integer overflow, pointer with signed index and signedness problem not counting the memory consumtion dos, which just helps. Update: the problem with the signed index is exploitable on Freebsd 5.4 amd64 wi...