Debian Qpopper
2 CVEs affecting Debian Qpopper. Latest disclosed: 2005-05-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-1152 | | 2005-05-25 | popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions. | |
CVE-2005-1151 | | 2005-05-25 | qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbi… |