CVE-2005-1151

Published: May 25, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.

Affected (2)

Products: Debian: Qpopper

Debian

1 product

Qpopper

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Debian Qpopper	Up to 4.0.4
Debian Qpopper	Version 4.0.5

References (12)

http://bugs.gentoo.org/show_bug.cgi?id=90622

Source: security@debian.org

http://secunia.com/advisories/15475

Source: security@debian.org

http://secunia.com/advisories/15478

Source: security@debian.org

http://secunia.com/advisories/15505

Source: security@debian.org

http://www.debian.org/security/2005/dsa-728

Source: security@debian.org

Patch

http://www.gentoo.org/security/en/glsa/glsa-200505-17.xml

Source: security@debian.org

http://bugs.gentoo.org/show_bug.cgi?id=90622