Detections
Analytics
Qualcomm Qpopper Username Remote Overflow
critical Nessus Network Monitor Plugin ID 1794
Synopsis
The remote host is vulnerable to a buffer overflow.Description
In version 4, a buffer overflow was introduced into the qpopper source tree. This buffer overflow is related to the handling of the client-supplied username and is present when a POP3 session is being initiated. It is believed that the overflow occurs before authentication, so it may not be required that users have valid POP accounts. This vulnerability can lead to a compromise of root privileges to remote attackers.Solution
Upgrade to the latest version.See Also
Plugin Details
Severity: Critical
ID: 1794
Family: POP Server
Published: 8/20/2004
Updated: 3/6/2019
Nessus ID: 10184
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:qualcomm:qpopper
Reference Information
CVE: CVE-1999-0822, CVE-2000-0060, CVE-2000-0091, CVE-2001-0776, CVE-2001-1046, CVE-2002-0454, CVE-2002-0799, CVE-2002-0889, CVE-2002-1781