CVE Catalog
CVE-2005-1513
CriticalSummary
Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.
Risk Assessment
An attacker can remotely crash the mail server or gain control over it, leading to data loss and service disruption.
Recommendation
Update qmail to a patched version or apply a security fix. In the meantime, limit the size of incoming SMTP requests.
Original NVD description (English source)
Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.