A remote code execution vulnerability in qmail

guest · May 21, 2020

A remote code execution vulnerability in qmail
May 19, 2020
https://lwn.net/Articles/820969/

Just in case anybody out there is still using qmail: a remote code execution vulnerability has just been disclosed. Its CVE number is CVE-2005-1513 because, as it turns out, the problem was reported 15 years ago but the fix was refused by the maintainer.

"As a proof of concept, we developed a reliable, local and remote exploit against Debian's qmail package in its default configuration. This proof of concept requires 4GB of disk space and 8GB of memory, and allows an attacker to execute arbitrary shell commands as any user, except root (and a few system users who do not own their home directory)."
Click to expand...

In May 2005, Georgi Guninski published "64 bit qmail fun", three vulnerabilities in qmail (CVE-2005-1513, CVE-2005-1514, CVE-2005-1515):

http://www.guninski.com/where_do_you_want_billg_to_go_tod...
Surprisingly, we re-discovered these vulnerabilities during a recent qmail audit;

Finally, we also discovered two minor vulnerabilities in qmail-verify (a third-party qmail patch that is included in, for example, Debian's qmail package): CVE-2020-3811 (a mail-address verification bypass), and CVE-2020-3812 (a local information disclosure).
Click to expand...

Qualys Security Advisory - 15 years later: Remote Code Execution in qmail (CVE-2005-1513)

Log in or Sign up

A remote code execution vulnerability in qmail

guest Guest

Log in or Sign up

A remote code execution vulnerability in qmail

guest Guest

Useful Searches