CVE-1999-0144

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

2.1 LowPublic exploit

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

Exploit likelihood

1.32%Down 1.5 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

Record: CVE-1999-0144
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

Record: CVE-1999-0144
Updated: 2026-11-02

EUVDEUVD-1999-0144 No score

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

Record: EUVD-1999-0144
Updated: 2026-11-03

GitHub AdvisoriesGHSA-78g5-jc8q-wgq5 No score

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

Denial of service in Qmail by specifying a large number of recipients with the RCPT command.

Record: GHSA-78g5-jc8q-wgq5
Updated: 2026-11-02

Affected products

qmail project qmail

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Dan Bernstein QMail 1.0 3 - RCPT Denial of Service (1)	1997-06-12
Exploit-DB	Dan Bernstein QMail 1.0 3 - RCPT Denial of Service (2)	1997-06-12

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-0144 is a low vulnerability (CVSS 2.1) in Qmail Project Qmail, published June 1, 1997. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

Public exploits

History

In short

References