Qpopper Multiple Insecure File Handling Vulnerabilities

BID:13714

Info

Qpopper Multiple Insecure File Handling Vulnerabilities

Bugtraq ID: 13714
Class: Design Error
CVE: CVE-2005-1151
CVE-2005-1152
Remote: No
Local: Yes
Published: May 23 2005 12:00AM
Updated: Jul 12 2009 02:56PM
Credit: Jens Steube as well as the vendor are credited with the discovery of these issues.
Vulnerable: SuSE SUSE Linux Enterprise Server 8
+ Linux kernel 2.4.21
+ Linux kernel 2.4.19
SuSE SUSE Linux Enterprise Server 7
+ Linux kernel 2.4.19
SuSE Linux Openexchange Server
SuSE Linux Enterprise Server 9
SuSE Linux Desktop 1.0
SuSE Linux 8.1
SuSE Linux 8.0 i386
SuSE Linux 8.0
SuSE Linux 7.3 sparc
SuSE Linux 7.3 ppc
SuSE Linux 7.3 i386
SuSE Linux 7.3
SuSE Linux 7.2 i386
SuSE Linux 7.2
SuSE Linux 7.1 x86
SuSE Linux 7.1 sparc
SuSE Linux 7.1 ppc
SuSE Linux 7.1 alpha
SuSE Linux 7.1
SuSE Linux 7.0 sparc
SuSE Linux 7.0 ppc
SuSE Linux 7.0 i386
SuSE Linux 7.0 alpha
SuSE Linux 7.0
SuSE Linux 6.4 ppc
SuSE Linux 6.4 i386
SuSE Linux 6.4 alpha
SuSE Linux 6.4
SuSE Linux 6.3 ppc
SuSE Linux 6.3 alpha
SuSE Linux 6.3
SuSE Linux 6.2
SuSE Linux 6.1 alpha
SuSE Linux 6.1
SuSE Linux 6.0
SuSE Linux 5.3
SuSE Linux 5.2
SuSE Linux 5.1
SuSE Linux 5.0
SuSE Linux 4.4.1
SuSE Linux 4.4
SuSE Linux 4.3
SuSE Linux 4.2
SuSE Linux 4.0
SuSE Linux 3.0
SuSE Linux 2.0
SuSE Linux 1.0
S.u.S.E. SuSE Linux School Server for i386
S.u.S.E. SuSE eMail Server III
S.u.S.E. SuSE eMail Server 3.1
S.u.S.E. Open-Enterprise-Server 9.0
S.u.S.E. Linux Professional 8.2
S.u.S.E. Linux Professional 7.3
S.u.S.E. Linux Personal 9.3
S.u.S.E. Linux Personal 9.2 x86_64
S.u.S.E. Linux Personal 9.2
S.u.S.E. Linux Personal 9.1 x86_64
S.u.S.E. Linux Personal 9.1
S.u.S.E. Linux Personal 9.0 x86_64
S.u.S.E. Linux Personal 9.0
S.u.S.E. Linux Personal 8.2
S.u.S.E. Linux Office Server
S.u.S.E. Linux IMAP Server 1.0
S.u.S.E. Linux Enterprise Server for S/390 9.0
S.u.S.E. Linux Enterprise Server for S/390
S.u.S.E. Linux Database Server 0
S.u.S.E. Linux Connectivity Server
Qualcomm qpopper 4.0.4
Qualcomm qpopper 4.0.3
+ Caldera OpenServer 5.0.6
+ Caldera OpenServer 5.0.5
Qualcomm qpopper 4.0.2
Qualcomm qpopper 4.0.1
Qualcomm qpopper 4.0 b14
Qualcomm qpopper 4.0 3
Qualcomm qpopper 4.0 2
Qualcomm qpopper 4.0 1
Qualcomm qpopper 4.0
Qualcomm qpopper 3.1
Qualcomm qpopper 3.0.2
Qualcomm qpopper 3.0.1 b2
Qualcomm qpopper 3.0.1
Qualcomm qpopper 3.0 beta9
Qualcomm qpopper 3.0 beta8
Qualcomm qpopper 3.0 beta7
Qualcomm qpopper 3.0 beta6
Qualcomm qpopper 3.0 beta5
Qualcomm qpopper 3.0 beta4
Qualcomm qpopper 3.0 beta31
Qualcomm qpopper 3.0 beta30
Qualcomm qpopper 3.0 beta3
Qualcomm qpopper 3.0 beta29
Qualcomm qpopper 3.0 beta28
Qualcomm qpopper 3.0 beta27
Qualcomm qpopper 3.0 beta26
Qualcomm qpopper 3.0 beta25
Qualcomm qpopper 3.0 beta24
Qualcomm qpopper 3.0 beta23
Qualcomm qpopper 3.0 beta22
Qualcomm qpopper 3.0 beta21
Qualcomm qpopper 3.0 beta20
Qualcomm qpopper 3.0 beta2
Qualcomm qpopper 3.0 beta19
Qualcomm qpopper 3.0 beta18
Qualcomm qpopper 3.0 beta17
Qualcomm qpopper 3.0 beta16
Qualcomm qpopper 3.0 beta15
Qualcomm qpopper 3.0 beta14
Qualcomm qpopper 3.0 beta13
Qualcomm qpopper 3.0 beta12
Qualcomm qpopper 3.0 beta11
Qualcomm qpopper 3.0 beta10
Qualcomm qpopper 3.0 beta1
Qualcomm qpopper 3.0 b20
Qualcomm qpopper 3.0
Qualcomm qpopper 2.53
Qualcomm qpopper 2.52
Qualcomm qpopper 2.4
Gentoo Linux
Debian Linux 3.1 sparc
Debian Linux 3.1 s/390
Debian Linux 3.1 ppc
Debian Linux 3.1 mipsel
Debian Linux 3.1 mips
Debian Linux 3.1 m68k
Debian Linux 3.1 ia-64
Debian Linux 3.1 ia-32
Debian Linux 3.1 hppa
Debian Linux 3.1 arm
Debian Linux 3.1 amd64
Debian Linux 3.1 alpha
Debian Linux 3.1
Debian Linux 3.0 sparc
Debian Linux 3.0 s/390
Debian Linux 3.0 ppc
Debian Linux 3.0 mipsel
Debian Linux 3.0 mips
Debian Linux 3.0 m68k
Debian Linux 3.0 ia-64
Debian Linux 3.0 ia-32
Debian Linux 3.0 hppa
Debian Linux 3.0 arm
Debian Linux 3.0 alpha
Debian Linux 3.0
Not Vulnerable: Qualcomm qpopper 4.0.5

Discussion

Qpopper Multiple Insecure File Handling Vulnerabilities

Qpopper is susceptible to multiple insecure file handling vulnerabilities. These issues are due to a failure of the application to properly drop superuser privileges when accessing certain files.

Qpopper also fails to properly set the process umask, potentially allowing it to create group or world writeable files.

Insufficient information is available at this time to properly describe the affects of these issues. It is conjectured that these issues may allow for local information disclosure, aiding in further attacks.

Exploit / POC

Qpopper Multiple Insecure File Handling Vulnerabilities

An exploit is not required.

Solution / Fix

Qpopper Multiple Insecure File Handling Vulnerabilities

Solution:
The vendor has released version 4.0.5 of Qpopper to address this issue.

Gentoo Linux has released advisory GLSA 200505-17 to address this issue. Users of affected packages are urged to execute te following commands with superuser privileges:
emerge --sync
emerge --ask --oneshot --verbose ">=net-mail/qpopper-4.0.5-r3"
Please see the referenced advisory for further information.

Debian has released advisory DSA 728-1 to address these issues. Please see the referenced advisory for more information.

Debian has released advisory DSA 728-2 with updated fixes for Debian 3.0 woody to address these issues. Please see the referenced advisory for more information.

SUSE Linux has released advisory SUSE-SR:2005:014 to address these and other issues. Please see the referenced advisory for more information.

Debian has released security advisory DSA 773-1 addressing several issues for their AMD64 port of the operating system. Please see the referenced advisory for further information.


Qualcomm qpopper 2.52

Qualcomm qpopper 3.0 beta25

Qualcomm qpopper 3.0 beta16

Qualcomm qpopper 3.0 beta23

Qualcomm qpopper 3.0 beta14

Qualcomm qpopper 3.0 beta28

Qualcomm qpopper 3.0 beta5

Qualcomm qpopper 3.0 beta1

Qualcomm qpopper 3.0 beta11

Qualcomm qpopper 3.0 b20

Qualcomm qpopper 3.0 beta18

Qualcomm qpopper 3.0 beta6

Qualcomm qpopper 3.0 beta13

Qualcomm qpopper 3.0 beta2

Qualcomm qpopper 3.0 beta31

Qualcomm qpopper 3.0 beta26

Qualcomm qpopper 3.0 beta17

Qualcomm qpopper 3.0 beta22

Qualcomm qpopper 3.0 beta30

Qualcomm qpopper 3.0 beta8

Qualcomm qpopper 3.0.1 b2

Qualcomm qpopper 3.0.1

Qualcomm qpopper 3.0.2

Qualcomm qpopper 4.0 3

Qualcomm qpopper 4.0 2

Qualcomm qpopper 4.0 1

Qualcomm qpopper 4.0

Qualcomm qpopper 4.0.3

Qualcomm qpopper 4.0.4

References

Qpopper Multiple Insecure File Handling Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report