Skip to content
OpenAdvisories
Unscored USN-4556-1 5 CVEs

netqmail vulnerabilities

Published Sep 29, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that netqmail did not properly handle certain input. Both
remote and local attackers could use this vulnerability to cause netqmail
to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514,
CVE-2005-1515)

It was discovered that netqmail did not properly handle certain input when
validating email addresses. An attacker could use this to bypass email
address validation. (CVE-2020-3811)

It was discovered that netqmail did not properly handle certain input when
validating email addresses. An attacker could use this vulnerability to
cause netqmail to disclose sensitive information. (CVE-2020-3812)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS netqmail 1.06-6.2~deb10u1build0.20.04.1

Vulnerabilities 5

  • Unscored —
    CVE-2005-1513 EPSS 11%

    Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of v…

    netqmail Ubuntu
  • Unscored —
    CVE-2005-1514

    commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to…

    netqmail Ubuntu
  • Unscored —
    CVE-2005-1515

    Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a …

    netqmail Ubuntu
  • Unscored —
    CVE-2020-3811

    qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.

    Debian netqmail netqmail Ubuntu
  • Unscored —
    CVE-2020-3812

    qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test fo…

    Debian netqmail netqmail Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2005-1513
  • report
    https://ubuntu.com/security/CVE-2005-1514
  • report
    https://ubuntu.com/security/CVE-2005-1515
  • report
    https://ubuntu.com/security/CVE-2020-3811
  • report
    https://ubuntu.com/security/CVE-2020-3812