CVE-2005-1152

Related Files

Debian Linux Security Advisory 728-1

Posted Aug 14, 2005

Authored by Debian | Site security.debian.org

Debian Security Advisory DSA 728-1 - Two bugs have been discovered in qpopper, an enhanced Post Office Protocol (POP3) server.

tags | advisory, protocol

systems | linux, debian

advisories | CVE-2005-1151, CVE-2005-1152

SHA-256 | 927280b0c3ad8ac3ca14d34a5b06d1dd107b04f47f4659be2203b9852d787834

Download | Favorite | View

Gentoo Linux Security Advisory 200505-17

Posted Jul 2, 2005

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200505-17 - Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users (CVE-2005-1151). The upstream developers discovered that Qpopper can be forced to create group or world writeable files (CVE-2005-1152). Versions less than 4.0.5-r3 are affected.

tags | advisory, local

systems | linux, gentoo

advisories | CVE-2005-1151, CVE-2005-1152

SHA-256 | 5f79ff0a88cc0ec2c54f6ceed5e00a22614019b40a6b651f22b9fb0d59a11434

Download | Favorite | View