medium4.6Public exploit code
CVE-2001-1487
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QPopper 4.0.x - PopAuth Trace File Shell Command Execution2001-12-18 · remote · unix · Verified
Impact
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Qpopper | through 4.0 |