PT-2005-2168 · Qpopper · Qpopper

Published 2005-05-25 · Updated 2008-09-05 · CVE-2005-1152

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions qpopper versions 4.0.5 and earlier

Description The issue is related to the improper setting of the umask in popauth.c, which may cause qpopper to create files with group or world-writable permissions.

Recommendations For versions 4.0.5 and earlier, consider updating the umask setting to ensure that files are created with proper permissions, or update to a version where this issue is fixed if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1152

DSA-728-1

Affected Products

Qpopper

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-1152 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200505-17.xml · Vendor Advisory
• http://bugs.gentoo.org/show_bug.cgi?id=90622 · Note
• http://bugs.gentoo.org/attachment.cgi?id=58329&action=view · Note
• http://debian.org/security/2005/dsa-728 · Patch, Vendor Advisory
• http://secunia.com/advisories/15505 · Note
• http://secunia.com/advisories/15478 · Note
• http://secunia.com/advisories/15475 · Note