PT-2005-2167
CVE-2005-1151
·
Published
2005-05-25
·
Updated
2008-09-05
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
qpopper versions 4.0.5 and earlier
Description
The issue arises from improper privilege handling when processing certain user-supplied files, allowing local users to overwrite or create arbitrary files as root.
Recommendations
For qpopper versions 4.0.5 and earlier, update to a version that properly drops privileges before processing user-supplied files to prevent arbitrary file creation or overwrite as root.
Found an issue in the description? Have something to add? Feel free to write us 👾