PT-2005-2167
CVE-2005-1151
·
تاريخ النشر
2005-05-25
·
تاريخ التحديث
2008-09-05
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
qpopper versions 4.0.5 and earlier
Description
The issue arises from improper privilege handling when processing certain user-supplied files, allowing local users to overwrite or create arbitrary files as root.
Recommendations
For qpopper versions 4.0.5 and earlier, update to a version that properly drops privileges before processing user-supplied files to prevent arbitrary file creation or overwrite as root.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾