PT-2005-3928 · Qualcomm · Qpopper

Kcope · Published 2005-09-28 · Updated 2011-03-08 · CVE-2005-3098

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Qualcomm qpopper version 4.0.8

Description The issue allows local users to modify arbitrary files and gain privileges. This is achieved via the command line argument, specifically the -t option for specifying a trace file.

Recommendations For version 4.0.8, avoid using the -t command line argument to minimize the risk of exploitation. Consider restricting access to the poppassd service until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-3098

Affected Products

Qpopper

References · 7

• 🔥 http://seclists.org/lists/fulldisclosure/2005/Sep/0652.html · Exploit
• 🔥 https://exploit-db.com/exploits/1229 · Exploit
• 🔥 http://securityfocus.com/bid/14944 · Exploit
• 🔥 https://exploit-db.com/exploits/1230 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3098 · Security Note
• http://secunia.com/advisories/16935 · Vendor Advisory
• http://vupen.com/english/advisories/2005/1844 · Note