Unscored DSA-728-1 2 CVEs

qpopper - missing privilege release

Published May 25, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	qpopper	4.0.4-2.woody.5

Vulnerabilities 2

Unscored —

CVE-2005-1151

qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows…

May 25, 2005
Unscored —

CVE-2005-1152

popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with gr…

May 25, 2005