Published: 25/05/2005 Updated: 05/09/2008

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

qpopper 4.0.5 and previous versions does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian qpopper 4.0.5
debian qpopper

This advisory does only cover updated packages for Debian 30 alias woody For reference below is the original advisory text: Two bugs have been discovered in qpopper, an enhanced Post Office Protocol (POP3) server The Common Vulnerabilities and Exposures project identifies the following problems: CAN-2005-1151 Jens Steube discovered that wh ...

NVD-CWE-Other http://www.debian.org/security/2005/dsa-728 http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml http://bugs.gentoo.org/show_bug.cgi?id=90622 http://secunia.com/advisories/15475 http://secunia.com/advisories/15478 http://secunia.com/advisories/15505 https://www.debian.org/security/./dsa-728 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-1151

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect