Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.

In version 4, a buffer overflow was introduced into the qpopper source tree. This buffer overflow is related to the handling of the client-supplied username and is present when a POP3 session is being initiated. It is believed that the overflow occurs before authentication, so it may not be required that users have valid POP accounts. This vulnerability can lead to a compromise of root privileges to remote attackers.

There are buffer overflow vulnerabilities present in 3.x versions of the Qualcomm popper daemon. These vulnerabilities are remotely executable and since the daemons run as root, the host running qpopper can be completely compromised anonymously.

The remote qpopper service may be vulnerable to a denial of service (DoS) attack. If a string of longer than approximately 2048 characters is sent to the qpopper process, a denial of service condition will occur.

Delegate is reportedly vulnerable to a stack-based buffer overflow that may allow for the execution of arbitrary code. The condition exists if the argument to the 'USER' command is of excessive length. 

The ZetaMail server will crash if a username/password pair longer than 3500 characters is supplied by the client.

The remote POP3 server might be vulnerable to a buffer overflow bug when it is issued at least one of these commands, with a too long argument :

 AUTH USER PASS

If confirmed, this problem might allow an attacker to execute arbitrary code on the remote system.

ID	Name	Product	Family	Severity
1794	Qualcomm Qpopper Username Remote Overflow	Nessus Network Monitor	POP Server	critical
1793	Qualcomm Qpopper Remote Overflows	Nessus Network Monitor	POP Server	critical
1792	Qualcomm Qpopper Remote Overflow DoS	Nessus Network Monitor	POP Server	critical
1791	Delegate Multiple Function Remote Overflows	Nessus Network Monitor	POP Server	critical
1790	ZetaMail Remote DoS	Nessus Network Monitor	POP Server	critical
10184	Multiple Vendor POP3 Remote Overflows	Nessus	Gain a shell remotely	critical

Detections

Analytics

CVE-2002-0454

high

Tenable Plugins

critical

critical

critical

critical

critical

critical