PT-2005-3928 · Qualcomm · Qpopper

Kcope · Publicado 2005-09-28 · Atualizado 2011-03-08 · CVE-2005-3098

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm qpopper version 4.0.8

Description The issue allows local users to modify arbitrary files and gain privileges. This is achieved via the command line argument, specifically the -t option for specifying a trace file.

Recommendations For version 4.0.8, avoid using the -t command line argument to minimize the risk of exploitation. Consider restricting access to the poppassd service until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-3098

Produtos afetados

Qpopper

Referências · 7

• 🔥 http://seclists.org/lists/fulldisclosure/2005/Sep/0652.html · Exploit
• 🔥 https://exploit-db.com/exploits/1229 · Exploit
• 🔥 http://securityfocus.com/bid/14944 · Exploit
• 🔥 https://exploit-db.com/exploits/1230 · Exploit
• http://vupen.com/english/advisories/2005/1844 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3098 · Nota de Segurança
• http://secunia.com/advisories/16935 · Aviso do Fabricante