CVE-2005-1515: netqmail Ubuntu

EPSS trend

Probability

6.52%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.52% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
referenceUnverified
Exploit Reference (guninski.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securitytracker.com)
Maturity: unknown

References

16 links

archives.neohapsis.com/archives/fulldisclosure/2005-05/0101.htmlMailing ListX Refsource FULLDISCExploit
www.guninski.com/where_do_you_want_billg_to_go_today_4.htmlX Refsource MISCExploit
securitytracker.com/id?1013911VDB EntryX Refsource SECTRACKExploit
www.openwall.com/lists/oss-security/2020/05/19/8Mailing ListX Refsource MLIST
www.openwall.com/lists/oss-security/2020/05/20/2Mailing ListX Refsource MLIST
seclists.org/fulldisclosure/2020/May/42Mailing ListX Refsource FULLDISC
packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.htmlX Refsource MISC
www.debian.org/security/2020/dsa-4692Vendor AdvisoryX Refsource DEBIAN
lists.debian.org/debian-lts-announce/2020/06/msg00002.htmlMailing ListX Refsource MLIST
security.gentoo.org/glsa/202007-01Vendor AdvisoryX Refsource GENTOO

Show all 16 references

usn.ubuntu.com/4556-1/Vendor AdvisoryX Refsource UBUNTU
ubuntu.com/security/CVE-2005-1515REPORT
www.openwall.com/lists/oss-security/2020/05/19/8REPORT
ubuntu.com/security/notices/USN-4556-1Advisory
ubuntu.com/security/notices/USN-4621-1Advisory
www.cve.org/CVERecord?id=CVE-2005-1515REPORT

Related vulnerabilities

USN-4621-1ubuntunetqmail5y ago05-11-2020 19:53netqmail vulnerabilities It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514, CVE-2005-1515) It was discovered that netqmail did not properly handle certain input when validating email addresses. An attacker could use this to bypass email address validation. (CVE-2020-3811) It was discovered that netqmail did not properly handle certain input when validating email addresses. An attacker could use this vulnerability to cause netqmail to disclose sensitive information. (CVE-2020-3812)USN-4556-1ubuntunetqmail6y ago29-09-2020 15:16netqmail vulnerabilities It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514, CVE-2005-1515) It was discovered that netqmail did not properly handle certain input when validating email addresses. An attacker could use this to bypass email address validation. (CVE-2020-3811) It was discovered that netqmail did not properly handle certain input when validating email addresses. An attacker could use this vulnerability to cause netqmail to disclose sensitive information. (CVE-2020-3812)CVE-2020-3811canonicalubuntu_linux+41.81%6y ago26-05-2020 13:04qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.CVE-2020-3812canonicalubuntu_linux+40.43%6y ago26-05-2020 13:04qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker's home directory, without dropping its privileges first.CVE-2005-1514ubuntunetqmail6.57%21y ago11-05-2005 04:00commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.CVE-2005-1513canonicalubuntu_linux+310.79%21y ago11-05-2005 00:00Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.

CVE-2005-1515: netqmail Ubuntu

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References