--- title: "CVE-2005-1515\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2005-1515?format=md keywords: index, follow --- # CVE-2005-1515 Publication date 24 May 2020 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Integer signedness error in the qmail\_put and substdio\_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands. ### From the Ubuntu Security Team It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to crash or execute arbitrary code. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | netqmail | 20.10 groovy | Not in release | | 20.04 LTS focal | Fixed 1.06-6.2~deb10u1build0.20.04.1 | | 18.04 LTS bionic | Fixed 1.06-6.2~deb10u1build0.18.04.1 | | 16.04 LTS xenial | Fixed 1.06-6.2~deb10u1build0.16.04.1 | | 14.04 LTS trusty | Fixed 1.06-6.2~deb10u1build0.14.04.1+esm1 Ubuntu Pro | | qmail | 20.10 groovy | Not in release | | 20.04 LTS focal | Not in release | | 18.04 LTS bionic | Not in release | | 16.04 LTS xenial | Not in release | | 14.04 LTS trusty | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ### Get expanded security coverage with Ubuntu Pro Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use. [Get Ubuntu Pro](https://ubuntu.com/pro) [30-day free trial](https://ubuntu.com/pro/free-trial) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1515) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-1515) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-1515) * [Debian](https://security-tracker.debian.org/tracker/CVE-2005-1515) ### Related Ubuntu Security Notices (USN) + [USN-4556-1](https://usn.ubuntu.com/USN-4556-1) + netqmail vulnerabilities + 29 September 2020 + [USN-4621-1](https://usn.ubuntu.com/USN-4621-1) + netqmail vulnerabilities + 5 November 2020 ### Other references * *