QP
Product
Qpopper
by Debian · last CVE May 25, 2005
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Qpopper to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2005-1151
–
0%
May 25
qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root
Affected: through 4.0.4; 4.0.5
CVE-2005-1152
–
0%
May 25
popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions
Affected: through 4.0.4; 4.0.5
Showing 2