CVE-2005-1514: Dan Bernstein Qmail

Medium severity, CVSS 5.0. EPSS: 6.6% chance of exploitation in the next 30 days.

commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SMTP command without a space character, which causes an array to be referenced with a negative index.

Affected products

Published 2005-05-11. Last modified 2026-06-16.