mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 19:16:22 +00:00
1.1 KiB
1.1 KiB
CVE-2005-1515
Description
Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands.
POC
Reference
- http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/157805/Qualys-Security-Advisory-Qmail-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2020/May/42
- http://seclists.org/fulldisclosure/2020/May/42
- http://www.openwall.com/lists/oss-security/2020/05/19/8
- http://www.openwall.com/lists/oss-security/2020/05/19/8
Github
No PoCs found on GitHub currently.