Base Score

HIGH7.5

CVE-2020-3811

qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.

VectorNETWORK

Published Bysecurity@debian.org

Published DateMay 26, 2020, 13:15

Weakness Type (CWE):CWE-665

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE

References

https://bugs.debian.org/961060
https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html
https://usn.ubuntu.com/4556-1/
https://www.debian.org/security/2020/dsa-4692
https://www.openwall.com/lists/oss-security/2020/05/19/8

Base Score

HIGH7.5

Weakness Type (CWE):CWE-665

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE