Qpopper (Debian) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2005-05-25. Vendor: Debian.

CVEs of Qpopper

• CVE-2005-1152 - CVSS 2.1 (low), 2005-05-25: popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.
• CVE-2005-1151 - CVSS 7.2 (high), 2005-05-25: qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create…