VULNERABILITY INTELLIGENCE
CVE-2005-1151
CVSS score7.2 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2005-05-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root.
Primary references
- security@debian.org
- security@debian.org
- security@debian.org
- security@debian.org
- security@debian.org — Patch
- security@debian.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108