Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-1152
HistoryMay 25, 2005 - 4:00 a.m.

CVE-2005-1152

2005-05-2504:00:00
[email protected]
web.nvd.nist.gov
8

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

25.7%

JSON

popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions.

Affected configurations

Nvd
Node
debianqpopperRange≤4.0.4
OR
debianqpopperMatch4.0.5
VendorProductVersionCPE
debianqpopper*cpe:2.3:a:debian:qpopper:*:*:*:*:*:*:*:*
debianqpopper4.0.5cpe:2.3:a:debian:qpopper:4.0.5:*:*:*:*:*:*:*

Related

ubuntucve 1
cvelist 1
cve 1
osv 1
openvas 8
debian 4
freebsd 1
nessus 6
gentoo 1
securityvulns 1
ubuntucve
ubuntucve
CVE-2005-1152
2005-05-25 00:00:00
cvelist
cvelist
CVE-2005-1152
2005-05-25 04:00:00
cve
cve
CVE-2005-1152
2005-05-25 04:00:00
osv
osv
qpopper - missing privilege release
2005-05-26 00:00:00
openvas
openvas
FreeBSD Ports: qpopper
2008-09-04 00:00:00
Debian Security Advisory DSA 728-1 (qpopper)
2008-01-17 00:00:00
FreeBSD Ports: qpopper
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
2005-05-26 04:49:46
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting
2005-05-25 15:34:54
[SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting
2005-05-25 15:34:54
freebsd
freebsd
qpopper -- multiple privilege escalation vulnerabilities
2005-05-26 00:00:00
nessus
nessus
Qpopper < 4.0.6 Multiple Insecure File Handling Local Privilege Escalation
2005-05-24 00:00:00
SuSE9 Security Update : qpopper (YOU Patch Number 10045)
2009-09-24 00:00:00
GLSA-200505-17 : Qpopper: Multiple Vulnerabilities
2005-05-28 00:00:00
gentoo
gentoo
Qpopper: Multiple Vulnerabilities
2005-05-23 00:00:00
securityvulns
securityvulns
[Full-disclosure] [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities
2005-05-24 00:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

25.7%

JSON
Related for NVD:CVE-2005-1152
ubuntucve1cvelist1cve1osv1openvas8debian4freebsd1nessus6gentoo1securityvulns1