PT-2001-2575 · Qualcomm · Qpopper

Publicado 2001-12-31 · Atualizado 2017-07-11 · CVE-2001-1487

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Qpopper versions 4.0 and earlier

Description The issue allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.

Recommendations For Qualcomm Qpopper versions 4.0 and earlier, consider removing the -trace file option or restricting its use to prevent symlink attacks until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-1487

Produtos afetados

Qpopper

Referências · 4

• 🔥 https://exploit-db.com/exploits/21185 · Exploit
• http://securityfocus.com/archive/1/246069 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7707 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1487 · Nota de Segurança