Qpopper

This hub aggregates every CVE we track for Qpopper, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Qpopper.

• CVE-2003-1452Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd p...3.6Oct 23, 2007
• CVE-2005-3098poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t (trace file) command line argument.4.6Sep 28, 2005
• CVE-2001-1487popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.4.6Jun 21, 2005
• CVE-2005-1152popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.2.1May 25, 2005
• CVE-2005-1151qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.7.2May 25, 2005
• CVE-2003-0143The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buff...10.0Sep 1, 2004
• CVE-2002-0889Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options ...4.6Apr 2, 2003
• CVE-2002-0454Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.5.0Apr 2, 2003
• CVE-2001-1046Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.10.0Jun 25, 2002
• CVE-2001-1068qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to deter...5.0Feb 2, 2002
• CVE-2000-1198qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.5.5Sep 12, 2001
• CVE-2000-0320Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a messag...5.0Oct 13, 2000
• CVE-2000-0442Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.7.5Jul 12, 2000
• CVE-2000-0096Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.7.2Feb 8, 2000
• CVE-1999-0822Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.10.0Feb 4, 2000