PT-2001-2575 · Qualcomm · Qpopper

Published 2001-12-31 · Updated 2017-07-11 · CVE-2001-1487

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm Qpopper versions 4.0 and earlier

Description The issue allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.

Recommendations For Qualcomm Qpopper versions 4.0 and earlier, consider removing the -trace file option or restricting its use to prevent symlink attacks until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2001-1487

Affected Products

Qpopper

References · 4

• 🔥 https://exploit-db.com/exploits/21185 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1487 · Security Note
• http://securityfocus.com/archive/1/246069 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7707 · Note