Vulnerability · Published May 26, 2020 · Assigned by debian
CVE-2020-3811
High 7.5
In plain English
A high-severity security flaw in netqmail from Debian. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.8%top 21.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.
Affected products (as reported)
References
- https://www.openwall.com/lists/oss-security/2020/05/19/8 x_refsource_MISC
- https://bugs.debian.org/961060 x_refsource_MISC
- https://www.debian.org/security/2020/dsa-4692 x_refsource_MISC
- [debian-lts-announce] 20200604 [SECURITY] [DLA 2234-1] netqmail security update mailing-list, x_refsource_MLIST
- USN-4556-1 vendor-advisory, x_refsource_UBUNTU