CVE-2020-3812
Medium
Description
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence of files in the attacker's home directory, without dropping its privileges first.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Netqmail
PublishedMay 26, 2020
First seenMay 26, 2020
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netqmail netqmail | 1.06 | — |
| debian debian_linux | 8.0, 9.0, 10.0 | — |
| canonical ubuntu_linux | 20.04 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.