CVE-2001-1068

CVE-2001-1068 affects qpopper 4.01 with PAM-based authentication on Red Hat systems. The issue is an information disclosure in authentication: when an invalid username is supplied, the system returns a different error message than for a valid username, enabling remote attackers to enumerate valid...

CVE-2001-1487

popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option...

QPopper 4.0.x - PopAuth Trace File Shell Command Execution

source: https://www.securityfocus.com/bid/3710/info Qpopper is a freely available, open source Post Office Protocol server. It is maintained and distributed by Qualcomm. When popauth is executed with the trace option, it does not correctly handle user-supplied input. A user can supply data to the...

QPopper 4.0.x - PopAuth Trace File Shell Command Execution

QPopper 4.0.x - PopAuth Trace File Shell Command Execution source: https://www.securityfocus.com/bid/3710/info Qpopper is a freely available, open source Post Office Protocol server. It is maintained and distributed by Qualcomm. When popauth is executed with the trace option, it does not correctl...

CVE-2000-1198

CVE-2000-1198 affects the qpopper POP server. The vulnerability arises from lock files being created with predictable names, enabling a local attacker to cause a denial of service for other users by creating lock files for other mail boxes. The available connected documents describe the issue and...

CVE-2000-1198

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...

CVE-2000-1198

qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users lack of mail access by creating lock files for other mail boxes...

CVE-2001-1068

qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system...

Проблемы с PAM в Qpopper (information leakage)

При использовании pam выдаются разные сообщения об ошибке при неверном пароле и несуществующем пользователе...

qpopper and pam.d

Hello, Take a look at the two sessions I have with Qpopper on a Redhat Linux 7.x box from an RPM package of version 4.0.1. Existing account: root@bart /etc telnet 10.10.10.1 110 Trying 10.10.10.1... Connected to 10.10.10.1. Escape character is '^'. +OK ready [email protected] user...

Переполнение буфера в Qpopper (buffer overflow)

No description provided...

CVE-2001-1046

Buffer overflow in qpopper aka qpop or popper 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username...

unsafe fgets() in qpopper

Topic: unix mailbox parsing trouble in qpopper Software affected: qpopper 3.0 fc2 and probably others Description: malicious user can remotely post message with spoofed or incorrect headers including "Received:" one and in some cases bypass virus checking. This can be used for sending trojans or ...

CVE-2000-0320

CVE-2000-0320 affects Qpopper 2.53 and 3.0, where the POP server fails to correctly identify the end-of-message delimiter, allowing a remote attacker to cause denial of service or mailbox corruption via a crafted 1023-character line ending with a newline. Root cause: improper parsing of the end-o...

CVE-2000-0320

Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n...

Linux news 17.07.00

Linux Kernel pre-patch 2.4.0 test5-pre1 Вышел первый пререлиз пятого тестового ядра Linux - Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing Linux Kernel 2.2.17pre12 Вышел очередной пререлиз нового стабильного ядра Linux - Linux Kernel 2.2.17. Подробнее:...

CVE-2000-0442

CVE-2000-0442 affects qpopper 2.53 and earlier. A formatting string vulnerability in the From: header processed by the UIDL/euidl path allows local users to gain privileges (to group ID mail) and potentially execute arbitrary code. This is supported by multiple sources (NVD entry, FreeBSD VuXML/O...

CVE-2000-0442

Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command...

FreeBSD-SA-00:26.popper

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:26 Security Advisory FreeBSD, Inc. Topic: popper port contains remote vulnerability REVISED Category: ports Module: popper Announced: 2000-07-05 Revised: 2000-07-11...

Linux news 23.06.00

Linux Kernel 2.2.17pre5 Вышел очередной, пятый по счету, пререлиз нового стабильного ядра Linux - Linux Kernel 2.2.17. Подробнее: http://www.cs.helsinki.fi/linux/linux-kernel/2000-25/0498.html В еженедельных новостях Debian сообщается: - Текущий менеджер выпусков Debian Ричард Браакман Richard...