CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 2CVE-2020-3811 – Debian Security Advisory 4692-1
https://notcve.org/view.php?id=CVE-2020-3811
21 May 2020 — qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability. qmail-verify como es usado en netqmail versión 1.06 es propenso a una vulnerabilidad de omisión de verificación de dirección de correo. It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to crash or execute arbitrary code. It was discovered that netqmail did not properly handle certain input when validating emai... • https://packetstorm.news/files/id/157805 • CWE-665: Improper Initialization CWE-863: Incorrect Authorization •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 2CVE-2020-3812 – Debian Security Advisory 4692-1
https://notcve.org/view.php?id=CVE-2020-3812
21 May 2020 — qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker's home directory, without dropping its privileges first. qmail-verify como es usado en netqmail versión 1.06, es propenso a una vulnerabilidad de divulgación de información. Un atacante local puede probar la existencia de archivos y direc... • https://packetstorm.news/files/id/157805 • CWE-269: Improper Privilege Management •