PT-2005-2168 · Qpopper · Qpopper

Publicado 2005-05-25 · Atualizado 2008-09-05 · CVE-2005-1152

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions qpopper versions 4.0.5 and earlier

Description The issue is related to the improper setting of the umask in popauth.c, which may cause qpopper to create files with group or world-writable permissions.

Recommendations For versions 4.0.5 and earlier, consider updating the umask setting to ensure that files are created with proper permissions, or update to a version where this issue is fixed if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1152

DSA-728-1

Produtos afetados

Qpopper

Referências · 8

• http://bugs.gentoo.org/show_bug.cgi?id=90622 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1152 · Nota de Segurança
• http://bugs.gentoo.org/attachment.cgi?id=58329&action=view · Nota
• http://debian.org/security/2005/dsa-728 · Correção, Aviso do Fabricante
• http://secunia.com/advisories/15505 · Nota
• http://secunia.com/advisories/15478 · Nota
• http://secunia.com/advisories/15475 · Nota
• http://gentoo.org/security/en/glsa/glsa-200505-17.xml · Aviso do Fabricante