commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade netqmail-mysqlUpgrade netqmail-tlsUpgrade netqmail | Dec 10, 2025 | May 11, 2005 |
| Gentoo Linux | — | Upgrade mail-mta/netqmail. | Jul 28, 2020 | May 11, 2005 |
| Ubuntu | — | Upgrade qmail-uids-gidsUpgrade qmail | Sep 30, 2020 | May 11, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub