{"id":"CVE-2005-1515","title":"Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtu","published":"2005-05-11T00:00:00.000Z","updated":"2026-06-16T18:13:11.383Z","severity":"medium","cvssScore":5,"epss":0.06516,"epssPct":0.9387,"kev":false,"maturity":"none","actionScore":22,"primaryVendor":"dan bernstein","primaryProduct":"qmail","cweId":null,"fixAvailable":true,"tags":["pre-auth","rce","dos","remote"],"epssDelta7":0,"summary":"Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large number of SMTP RCPT TO commands.","cvssVector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","cvssVersion":"2.0","cvssSource":"nvd-primary","cweName":null,"kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"tr":"2026-10-01T11:24:25.940Z","cna":"2024-08-07T21:51:50.426Z","osv":"2026-11-13T03:18:18.039Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:43:31.868Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":0,"metasploit":0,"nuclei":0,"githubPoc":0},"products":[{"vendor":"dan bernstein","product":"qmail","cpe":"cpe:2.3:a:dan_bernstein:qmail"}],"references":[{"url":"http://seclists.org/fulldisclosure/2020/May/42","tags":null},{"url":"http://www.openwall.com/lists/oss-security/2020/05/19/8","tags":null},{"url":"http://www.openwall.com/lists/oss-security/2020/05/20/2","tags":null},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00002.html","tags":null},{"url":"https://security.gentoo.org/glsa/202007-01","tags":null},{"url":"https://usn.ubuntu.com/4556-1/","tags":null},{"url":"https://www.debian.org/security/2020/dsa-4692","tags":null}],"exploits":[],"analysis":null,"affectedVersions":[{"vendor":"dan bernstein","product":"qmail","version":"*","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}