qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4621-1 advisory.

    It was discovered that netqmail did not properly handle certain input. Both remote and local attackers     could use this vulnerability to cause netqmail to crash or execute arbitrary code. (CVE-2005-1513,     CVE-2005-1514, CVE-2005-1515)

    It was discovered that netqmail did not properly handle certain input when validating email addresses. An     attacker could use this to bypass email address validation. (CVE-2020-3811)

    It was discovered that netqmail did not properly handle certain input when validating email addresses. An     attacker could use this vulnerability to cause netqmail to disclose sensitive information. (CVE-2020-3812)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4556-1 advisory.

    It was discovered that netqmail did not properly handle certain input. Both remote and local attackers     could use this vulnerability to cause netqmail to crash or execute arbitrary code. (CVE-2005-1513,     CVE-2005-1514, CVE-2005-1515)

    It was discovered that netqmail did not properly handle certain input when validating email addresses. An     attacker could use this to bypass email address validation. (CVE-2020-3811)

    It was discovered that netqmail did not properly handle certain input when validating email addresses. An     attacker could use this vulnerability to cause netqmail to disclose sensitive information. (CVE-2020-3812)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There were several CVE bugs reported against src:netqmail.

CVE-2005-1513

Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.

CVE-2005-1514

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.

CVE-2005-1515

Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands.

CVE-2020-3811

qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.

CVE-2020-3812

qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker's home directory, without dropping its privileges first.

For Debian 8 'Jessie', these problems have been fixed in version 1.06-6.2~deb8u1.

We recommend that you upgrade your netqmail packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Georgi Guninski and the Qualys Research Labs discovered multiple vulnerabilities in qmail (shipped in Debian as netqmail with additional patches) which could result in the execution of arbitrary code, bypass of mail address verification and a local information leak whether a file exists or not.

ID	Name	Product	Family	Severity
142500	Ubuntu 16.04 LTS / 18.04 LTS : netqmail vulnerabilities (USN-4621-1)	Nessus	Ubuntu Local Security Checks	critical
141054	Ubuntu 20.04 LTS : netqmail vulnerabilities (USN-4556-1)	Nessus	Ubuntu Local Security Checks	critical
137154	Debian DLA-2234-1 : netqmail security update	Nessus	Debian Local Security Checks	critical
136837	Debian DSA-4692-1 : netqmail - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2020-3811

high

Tenable Plugins

critical

critical

critical

critical