PT-2020-3626
CVE-2020-3811
·
Published
2020-05-20
·
Updated
2022-04-28
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions
netqmail version 1.06
Description
The issue is related to a lack of input validation in the qmail-verify module of the netqmail email client. This can be exploited by a remote attacker to compromise data integrity. The vulnerability allows for a mail-address verification bypass.
Recommendations
For netqmail version 1.06, consider disabling the qmail-verify module until a patch is available to prevent potential exploitation. Restrict access to the mail-address verification feature to minimize the risk of data integrity compromise.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾