PT-2005-2167

CVE-2005-1151

·

Published

2005-05-25

·

Updated

2008-09-05

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions qpopper versions 4.0.5 and earlier
Description The issue arises from improper privilege handling when processing certain user-supplied files, allowing local users to overwrite or create arbitrary files as root.
Recommendations For qpopper versions 4.0.5 and earlier, update to a version that properly drops privileges before processing user-supplied files to prevent arbitrary file creation or overwrite as root.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
DSA-728-1
Found an issue in the description? Have something to add? Feel free to write us 👾