high7.5Public exploit code
CVE-2000-0442
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cobalt RaQ 2.0/3.0 / qpopper 2.52/2.53 - 'EUIDL' Format String Input2000-05-24 · local · linux · Verified
Impact
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Qpopper | Versions 2.52, 2.53 |
| Sun | Cobalt Raq 2 | All versions |
| Sun | Cobalt Raq 3i | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0267.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_51.html
- http://www.securityfocus.com/bid/1242
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0267.html
- http://www.novell.com/linux/security/advisories/suse_security_announce_51.html
- http://www.securityfocus.com/bid/1242