3 matches found
Qpopper 4.0.x Remote Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7058/info A memory corruption vulnerability has been discovered in Qpopper version 4.0.4 and earlier. The vulnerability occurs when calling the 'mdef' command and a malicious macro name is supplied. By filling a target...
Qpopper <= 4.0.8 (poppassd) Local Root Exploit (linux)
Exploit for linux platform in category local exploits ====================================================== Qpopper program.c include include include void init if !geteuid setgid0; setuid0; remove"/etc/ld.so.preload"; execl"/bin/sh","sh","-c","chown root:root /tmp/suid; chmod +s /tmp/suid",NULL;...
QPopper 4.0.4 buffer overflow
Affected versions 4.0.3 and 4.0.4. default install. Servers, not processing users configuration file /.qpopper-options are insensible to this bug. popbull.c ----------- int CopyOneBull POP p, long bnum, char name FILE bull; char buffer MAXMSGLINELEN ; BOOL inheader = TRUE; BOOL firstline = TRUE;...