Qualcomm Qpopper Remote Overflows

Binary data 1793.prm...

qpopper Options File Buffer Overflow

Binary data 1789.prm...

qpopper < 3.0.1b2 EIUDL Arbitrary Command Execution

Binary data 1784.prm...

qpopper < 4.0.5fc2 Qvsnprintf Remote Overflow

Binary data 1786.prm...

qpopper < 4.0 PASS Command Remote Overflow

Binary data 1785.prm...

SUSE-SA:2003:018: qpopper

The remote host is missing the patch for the advisory SUSE-SA:2003:018 qpopper. The Post-Office-Protocol- POP- Server qpopper version 4 was vulnerable to a buffer overflow. The buffer overflow occurs after authentication has taken place. Therefore pop-users with a valid account can execute...

FreeBSD : qpopper format string vulnerability (160)

The following package needs to be updated: qpopper %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgebdf65c72ca611d893550020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Qpopper Authentication Timing Response Account Enumeration

The remote server appears to be running a version of Qpopper that is older than 4.0.6. Versions older than 4.0.6 are vulnerable to a bug where remote attackers can enumerate valid usernames based on server responses during the authentication process. This script is based on Thomas Reinke's...

CVE-2003-1452

Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program...

ConnecTalk Security Advisory: Qpopper leaks information during authentication

============================================================================= ConnecTalk Inc. Security Advisory Topic: Qpopper leaks information during authentication Vendor: Eudora Product: qpopper 4.0.4 and qpopper 4.0.5 Note: other versions have not been tested. Problem found: May 14, 2003...

Qpopper v4.0.x poppassd local root exploit

======================================== INetCop Security Advisory 2003-0x82-016 ======================================== Title: Qpopper v4.0.x poppassd local root exploit 0x01. Description Qpopper poppassd is a program that changes system passwords thus allowing users to change their mail...

Qpopper 4.0.x - 'poppassd' Privilege Escalation

/ Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define DPOPPASS "/usr/local/bin/poppassd" define DNAM...

Qpopper poppassd privelege escalation

During call to external program specified by used rot privileges are not dropped...

Qpopper 4.0.x poppassd Local Root Exploit

Exploit for linux platform in category local exploits ========================================= Qpopper 4.0.x poppassd Local Root Exploit ========================================= / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -...

Qpopper 4.0.x - poppassd Privilege Escalation

Qpopper 4.0.x - poppassd Privilege Escalation / Title: Qpopper v4.0.x poppassd local root exploit. Exploit code: 0x82-Local.Qp0ppa55d.c -- ./0x82-Local.Qp0ppa55d -u x82 -p mypasswd Qpopper v4.0.x poppassd local root exploit. by Xpl017Elz / include include include include define BUFSZ 0x82 define...

CVE-2002-0454

Qpopper aka in.qpopper or popper 4.0.3 and earlier allows remote attackers to cause a denial of service CPU consumption via a very large string, which causes an infinite loop...

CVE-2002-0889

Buffer overflow in Qpopper popper 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file...

CVE-2002-0889

CVE-2002-0889 describes a buffer overflow in Qpopper (popper) 4.0.4 and earlier. The flaw allows local users to cause a denial of service and potentially execute arbitrary code via a long bulldir argument in the user’s .qpopper-options configuration file. Affected software is Qpopper up to versio...

CVE-2002-0454

Qpopper (aka in.qpopper or popper) versions 4.0.3 and earlier are affected by a remote DoS vulnerability: processing a very large string can trigger an infinite loop, consuming CPU. The affected component is the POP3 server (qpopper); root cause is an input-induced infinite loop. A fix is referen...

CVE-2003-0143

The popmsg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name...