CVE-1999-0006

Qpopper-based POP servers are vulnerable to a buffer overflow via a long PASS command that can allow a remote attacker to gain root access. The records consistently describe BSD/Qualcomm qpopper implementations with this issue; specific affected versions are not enumerated in the provided documen...

CVE-2000-0442

CVE-2000-0442 affects qpopper 2.53 and earlier. A formatting string vulnerability in the From: header processed by the UIDL/euidl path allows local users to gain privileges (to group ID mail) and potentially execute arbitrary code. This is supported by multiple sources (NVD entry, FreeBSD VuXML/O...

CVE-2003-1452

CVE-2003-1452 describes an untrusted search path vulnerability in Qualcomm qpopper 4.0–4.05. The root cause is PATH environment variable manipulation that causes the daemon to execute a malicious smbpasswd program, enabling local users to run arbitrary code. The available records consistently sta...

CVE-1999-0822

CVE-1999-0822 : Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via the AUTH command. The connected documents corroborate a remote overflow/DoS pattern for qpopper-related entries, but do not provide a specific patch or fixed version in the material. The NVD/NIST entry records a m...

CVE-2003-0143

CVE-2003-0143 affects qpopper 4.0.x prior to 4.0.5fc2. The pop_msg function fails to null-terminate the message buffer after Qvsnprintf, enabling an authenticated user to trigger a buffer overflow in a mdef command with a long macro name and execute arbitrary code. The CVE is associated with remo...

CVE-2000-0320

CVE-2000-0320 affects Qpopper 2.53 and 3.0, where the POP server fails to correctly identify the end-of-message delimiter, allowing a remote attacker to cause denial of service or mailbox corruption via a crafted 1023-character line ending with a newline. Root cause: improper parsing of the end-o...

CVE-2002-0454

Qpopper (aka in.qpopper or popper) versions 4.0.3 and earlier are affected by a remote DoS vulnerability: processing a very large string can trigger an infinite loop, consuming CPU. The affected component is the POP3 server (qpopper); root cause is an input-induced infinite loop. A fix is referen...

CVE-2000-1198

CVE-2000-1198 affects the qpopper POP server. The vulnerability arises from lock files being created with predictable names, enabling a local attacker to cause a denial of service for other users by creating lock files for other mail boxes. The available connected documents describe the issue and...

CVE-2005-3098

CVE-2005-3098 affects Qualcomm qpopper’s poppassd (qpopper 4.0.8). The -t (trace file) argument allows local users to modify arbitrary files and escalate privileges. Impact is local privilege escalation; exploitation details are not provided in the supplied documents. No remediation details are i...

CVE-2001-1046

CVE-2001-1046 affects qpopper (aka qpop or popper) 4.0–4.0.2, where a buffer overflow can be triggered by a long username, enabling a remote attacker to gain privileges. OpenVAS details extend this: remote qpopper servers running 4.0.3 or 4.0.4 are vulnerable when configured to process a user’s ~...

CVE-2001-1487

CVE-2001-1487 affects Qualcomm Qpopper 4.0 and earlier. The popauth utility can be exploited via a symlink attack on the -trace option, allowing local users to overwrite arbitrary files and execute commands as the pop user. Impact is described as partial confidentiality, integrity, and availabili...

CVE-2000-0096

Qpopper 3.0 beta is vulnerable to a buffer overflow via a long LIST command, enabling local privilege gain. This CVE (CVE-2000-0096) affects Qpopper and is detailed in multiple sources, including CVE records and the Nessus 10197 plugin for Qpopper

CVE-2001-1068

CVE-2001-1068 affects qpopper 4.01 with PAM-based authentication on Red Hat systems. The issue is an information disclosure in authentication: when an invalid username is supplied, the system returns a different error message than for a valid username, enabling remote attackers to enumerate valid...

CVE-2002-0889

CVE-2002-0889 describes a buffer overflow in Qpopper (popper) 4.0.4 and earlier. The flaw allows local users to cause a denial of service and potentially execute arbitrary code via a long bulldir argument in the user’s .qpopper-options configuration file. Affected software is Qpopper up to versio...